646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
37 lines
1.6 KiB
Diff
37 lines
1.6 KiB
Diff
diff --git a/impress/settings.py b/impress/settings.py
|
|
index 9d825095..518aca7f 100755
|
|
--- a/impress/settings.py
|
|
+++ b/impress/settings.py
|
|
@@ -822,19 +822,24 @@ class Production(Base):
|
|
#
|
|
# In other cases, you should comment the following line to avoid security issues.
|
|
# SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
|
|
- SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
|
|
- SECURE_HSTS_SECONDS = 60
|
|
- SECURE_HSTS_PRELOAD = True
|
|
- SECURE_HSTS_INCLUDE_SUBDOMAINS = True
|
|
- SECURE_SSL_REDIRECT = True
|
|
+ SECURE_PROXY_SSL_HEADER = values.TupleValue(("HTTP_X_FORWARDED_PROTO", "https"),
|
|
+ environ_name="SECURE_PROXY_SSL_HEADER")
|
|
+ SECURE_HSTS_SECONDS = values.IntegerValue(
|
|
+ 60, environ_name="SECURE_HSTS_SECONDS")
|
|
+ SECURE_HSTS_PRELOAD = values.BooleanValue(
|
|
+ True, environ_name="SECURE_HSTS_PRELOAD")
|
|
+ SECURE_HSTS_INCLUDE_SUBDOMAINS = values.BooleanValue(
|
|
+ True, environ_name="SECURE_HSTS_INCLUDE_SUBDOMAINS")
|
|
+ SECURE_SSL_REDIRECT = values.BooleanValue(
|
|
+ True, environ_name="SECURE_SSL_REDIRECT")
|
|
SECURE_REDIRECT_EXEMPT = [
|
|
"^__lbheartbeat__",
|
|
"^__heartbeat__",
|
|
]
|
|
|
|
# Modern browsers require to have the `secure` attribute on cookies with `Samesite=none`
|
|
- CSRF_COOKIE_SECURE = True
|
|
- SESSION_COOKIE_SECURE = True
|
|
+ CSRF_COOKIE_SECURE = values.BooleanValue(True, environ_name="CSRF_COOKIE_SECURE")
|
|
+ SESSION_COOKIE_SECURE = values.BooleanValue(True, environ_name="SESSION_COOKIE_SECURE")
|
|
|
|
# Privacy
|
|
SECURE_REFERRER_POLICY = "same-origin"
|