🔐 Fix CSRF error in production
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
Ekaropolus 2025-05-15 00:45:19 -06:00
parent 2bb01ae691
commit cb38ddae1f

View File

@ -123,3 +123,11 @@ NEO4J_PASSWORD = os.getenv("NEO4J_PASSWORD")
# OpenAI # OpenAI
OPENAI_API_KEY = os.getenv("OPENAI_API_KEY") OPENAI_API_KEY = os.getenv("OPENAI_API_KEY")
# CSRF protection for production
CSRF_TRUSTED_ORIGINS = [
"https://app.polisplexity.tech",
]
# Support for secure reverse proxy (e.g., Nginx or Hostinger HTTPS proxy)
SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")