Fix ALLOWED_HOSTS entries in production settings

Updated ALLOWED_HOSTS to remove the protocol prefix, ensuring compatibility with Django's host validation. This change prevents potential issues with host header mismatches in production environments.
2 weeks ago · f1911ab8c9
parent c8eacb2204
commit f1911ab8c9
1 changed files with 1 additions and 1 deletions
--- a/feo_homepage/settings/prod.py
+++ b/feo_homepage/settings/prod.py
@ -4,7 +4,7 @@ from .base import *
 DEBUG = False
 TEMPLATE_DEBUG = True

-ALLOWED_HOSTS = ["https://www.feo.gmbh", "https://feo.gmbh"]
+ALLOWED_HOSTS = ["www.feo.gmbh", "feo.gmbh"]
 USE_X_FORWARDED_HOST = True
 SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
 CSRF_TRUSTED_ORIGINS = ["https://www.feo.gmbh", "https://feo.gmbh"]