Вернул тестовый деплой
This commit is contained in:
parent
439202a140
commit
8ff5fc2f58
Binary file not shown.
@ -22,50 +22,11 @@ BASE_DIR = Path(__file__).resolve().parent.parent
|
|||||||
# SECURITY WARNING: keep the secret key used in production secret!
|
# SECURITY WARNING: keep the secret key used in production secret!
|
||||||
SECRET_KEY = 'django-insecure-5rs2a1*8cxjkv*%6k1-88biv&1#nep%@i+%1^dk=5j$s&e&hwm'
|
SECRET_KEY = 'django-insecure-5rs2a1*8cxjkv*%6k1-88biv&1#nep%@i+%1^dk=5j$s&e&hwm'
|
||||||
|
|
||||||
# Безопасность cookies для HTTPS
|
|
||||||
SESSION_COOKIE_SECURE = True
|
|
||||||
CSRF_COOKIE_SECURE = True
|
|
||||||
SESSION_COOKIE_HTTPONLY = True
|
|
||||||
CSRF_COOKIE_HTTPONLY = False # Django требует доступ к CSRF cookie через JS
|
|
||||||
SESSION_COOKIE_SAMESITE = 'Lax'
|
|
||||||
CSRF_COOKIE_SAMESITE = 'Lax'
|
|
||||||
|
|
||||||
# Если используете другие cookies
|
|
||||||
LANGUAGE_COOKIE_SECURE = True
|
|
||||||
LANGUAGE_COOKIE_HTTPONLY = True
|
|
||||||
LANGUAGE_COOKIE_SAMESITE = 'Lax'
|
|
||||||
|
|
||||||
# SECURITY WARNING: don't run with debug turned on in production!
|
# SECURITY WARNING: don't run with debug turned on in production!
|
||||||
DEBUG = False
|
DEBUG = True
|
||||||
|
|
||||||
X_FRAME_OPTIONS = 'SAMEORIGIN'
|
ALLOWED_HOSTS = ['*']
|
||||||
# Или разрешить конкретные домены (Django 4.0+)
|
|
||||||
X_FRAME_OPTIONS = 'ALLOW-FROM https://metrika.yandex.ru'
|
|
||||||
|
|
||||||
# ОБЯЗАТЕЛЬНО укажите ваши домены
|
|
||||||
ALLOWED_HOSTS = [
|
|
||||||
'nikdizell.ru',
|
|
||||||
'www.nikdizell.ru',
|
|
||||||
'localhost',
|
|
||||||
'127.0.0.1',
|
|
||||||
'192.168.31.88' # Добавьте IP сервера
|
|
||||||
]
|
|
||||||
|
|
||||||
# Важно для работы за прокси
|
|
||||||
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
|
|
||||||
SECURE_SSL_REDIRECT = True
|
|
||||||
|
|
||||||
# Дополнительная безопасность
|
|
||||||
SECURE_BROWSER_XSS_FILTER = True
|
|
||||||
SECURE_CONTENT_TYPE_NOSNIFF = True
|
|
||||||
SECURE_HSTS_SECONDS = 31536000
|
|
||||||
SECURE_HSTS_INCLUDE_SUBDOMAINS = True
|
|
||||||
SECURE_HSTS_PRELOAD = True
|
|
||||||
|
|
||||||
CSRF_TRUSTED_ORIGINS = [
|
|
||||||
'https://nikdizell.ru',
|
|
||||||
'https://www.nikdizell.ru',
|
|
||||||
]
|
|
||||||
|
|
||||||
# Application definition
|
# Application definition
|
||||||
|
|
||||||
|
|||||||
Binary file not shown.
Binary file not shown.
Loading…
x
Reference in New Issue
Block a user