Вернул тестовый деплой
This commit is contained in:
parent
439202a140
commit
8ff5fc2f58
Binary file not shown.
@ -22,50 +22,11 @@ BASE_DIR = Path(__file__).resolve().parent.parent
|
||||
# SECURITY WARNING: keep the secret key used in production secret!
|
||||
SECRET_KEY = 'django-insecure-5rs2a1*8cxjkv*%6k1-88biv&1#nep%@i+%1^dk=5j$s&e&hwm'
|
||||
|
||||
# Безопасность cookies для HTTPS
|
||||
SESSION_COOKIE_SECURE = True
|
||||
CSRF_COOKIE_SECURE = True
|
||||
SESSION_COOKIE_HTTPONLY = True
|
||||
CSRF_COOKIE_HTTPONLY = False # Django требует доступ к CSRF cookie через JS
|
||||
SESSION_COOKIE_SAMESITE = 'Lax'
|
||||
CSRF_COOKIE_SAMESITE = 'Lax'
|
||||
|
||||
# Если используете другие cookies
|
||||
LANGUAGE_COOKIE_SECURE = True
|
||||
LANGUAGE_COOKIE_HTTPONLY = True
|
||||
LANGUAGE_COOKIE_SAMESITE = 'Lax'
|
||||
|
||||
# SECURITY WARNING: don't run with debug turned on in production!
|
||||
DEBUG = False
|
||||
DEBUG = True
|
||||
|
||||
X_FRAME_OPTIONS = 'SAMEORIGIN'
|
||||
# Или разрешить конкретные домены (Django 4.0+)
|
||||
X_FRAME_OPTIONS = 'ALLOW-FROM https://metrika.yandex.ru'
|
||||
ALLOWED_HOSTS = ['*']
|
||||
|
||||
# ОБЯЗАТЕЛЬНО укажите ваши домены
|
||||
ALLOWED_HOSTS = [
|
||||
'nikdizell.ru',
|
||||
'www.nikdizell.ru',
|
||||
'localhost',
|
||||
'127.0.0.1',
|
||||
'192.168.31.88' # Добавьте IP сервера
|
||||
]
|
||||
|
||||
# Важно для работы за прокси
|
||||
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
|
||||
SECURE_SSL_REDIRECT = True
|
||||
|
||||
# Дополнительная безопасность
|
||||
SECURE_BROWSER_XSS_FILTER = True
|
||||
SECURE_CONTENT_TYPE_NOSNIFF = True
|
||||
SECURE_HSTS_SECONDS = 31536000
|
||||
SECURE_HSTS_INCLUDE_SUBDOMAINS = True
|
||||
SECURE_HSTS_PRELOAD = True
|
||||
|
||||
CSRF_TRUSTED_ORIGINS = [
|
||||
'https://nikdizell.ru',
|
||||
'https://www.nikdizell.ru',
|
||||
]
|
||||
|
||||
# Application definition
|
||||
|
||||
|
||||
Binary file not shown.
Binary file not shown.
Loading…
x
Reference in New Issue
Block a user