From 6b6f294c9b8b286daea3ffa69aca2be785b6c305 Mon Sep 17 00:00:00 2001
From: erjemin <erjemin@gmail.com>
Date: Thu, 5 Mar 2026 13:44:33 +0300
Subject: [PATCH] =?UTF-8?q?fix:=20canonical=20=D0=B2=20=D0=BF=D1=80=D0=BE?=
 =?UTF-8?q?=D0=B4=D0=B0=D0=BA=D1=88=D0=B5=D0=BD=20=D0=BD=D0=B5=20=D0=B4?=
 =?UTF-8?q?=D0=BE=D0=BB=D0=B6=D0=B5=D0=BD=20=D0=BF=D0=BE=D0=BA=D0=B0=D0=B7?=
 =?UTF-8?q?=D1=8B=D0=B2=D0=B0=D1=82=D1=8C=20http=20=D0=B2=D0=BC=D0=B5?=
 =?UTF-8?q?=D1=81=D1=82=D0=BE=20https?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 config/nginx/etpgrf--internal-nginx.conf | 1 +
 etpgrf_site/etpgrf_site/settings.py      | 7 +++++++
 2 files changed, 8 insertions(+)

diff --git a/config/nginx/etpgrf--internal-nginx.conf b/config/nginx/etpgrf--internal-nginx.conf
index 324ce72..e2e6a11 100644
--- a/config/nginx/etpgrf--internal-nginx.conf
+++ b/config/nginx/etpgrf--internal-nginx.conf
@@ -114,6 +114,7 @@ http {
 
             proxy_pass http://app_server;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
             proxy_set_header Host $host;
             proxy_redirect off;
         }
diff --git a/etpgrf_site/etpgrf_site/settings.py b/etpgrf_site/etpgrf_site/settings.py
index 78c2672..ccd9514 100644
--- a/etpgrf_site/etpgrf_site/settings.py
+++ b/etpgrf_site/etpgrf_site/settings.py
@@ -140,3 +140,10 @@ MEDIA_URL = '/media/'
 # https://docs.djangoproject.com/en/6.0/ref/settings/#default-auto-field
 
 DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
+
+# Настройки безопасности для работы за прокси
+if not DEBUG:
+    SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
+    SECURE_SSL_REDIRECT = True
+    SESSION_COOKIE_SECURE = True
+    CSRF_COOKIE_SECURE = True