From 7f944200de3f2e03900ec55f3d80aae81b428331 Mon Sep 17 00:00:00 2001 From: erjemin Date: Wed, 2 Sep 2026 21:32:39 +0300 Subject: [PATCH] =?UTF-8?q?mod:=20=D1=83=D0=BA=D0=B0=D0=B7=D1=8B=D0=B2?= =?UTF-8?q?=D0=B0=D0=B5=D0=BC=20Django=20=D0=B4=D0=BE=D0=B2=D0=B5=D1=80?= =?UTF-8?q?=D1=8F=D1=82=D1=8C=20=D0=B7=D0=B0=D0=B3=D0=BE=D0=BB=D0=BE=D0=B2?= =?UTF-8?q?=D0=BA=D1=83=20X-Forwarded-Proto=20=D0=BE=D1=82=20=D1=80=D0=B5?= =?UTF-8?q?=D0=B2=D0=B5=D1=80=D1=81-=D0=BF=D1=80=D0=BE=D0=BA=D1=81=D0=B8?= =?UTF-8?q?=20Nginx?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- hypn0/hypn0/settings.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/hypn0/hypn0/settings.py b/hypn0/hypn0/settings.py index 6c00956..68eb8b0 100644 --- a/hypn0/hypn0/settings.py +++ b/hypn0/hypn0/settings.py @@ -48,6 +48,9 @@ ALLOWED_HOSTS = env.list( default=['127.0.0.1', 'localhost', 'hypn0.ru'], ) +# Указывает Django доверять заголовку X-Forwarded-Proto от reverse proxy +SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https') + # CSRF для всех хостов которым доверяем отправлять входящие запросы CSRF_TRUSTED_ORIGINS = env.list('DJANGO_CSRF_TRUSTED_ORIGINS', default=[]) @@ -235,3 +238,6 @@ else: # robots.txt, favicon.ico и т.п.) WHITENOISE_ROOT = PUBLIC_DIR + # Защита куки сессий и CSRF от передачи по открытому HTTP + SESSION_COOKIE_SECURE = True + CSRF_COOKIE_SECURE = True