fix: update allowed hosts and CSRF settings for production environment

jumagu · Dec 30, 2024 · f342a00 · f342a00
1 parent bffd7ba
commit f342a00
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/src/home/settings.py b/src/home/settings.py
@@ -49,17 +49,20 @@
 BASE_URL = config('BASE_URL', default=None)
 
 ALLOWED_HOSTS = [
-    '.railway.app', # https://saas.prod.railway.app
+    'django-saas-prod.up.railway.app',
 ]
 if DEBUG:
     ALLOWED_HOSTS += [
         '127.0.0.1',
         'localhost',
+        'django-saas-prod.up.railway.app',
     ]
 
+CSRF_TRUSTED_ORIGINS = ['https://django-saas-prod.up.railway.app']
+CSRF_ALLOWED_ORIGINS = ['https://django-saas-prod.up.railway.app']
+CORS_ORIGINS_WHITELIST = ['https://django-saas-prod.up.railway.app']
 
 # Application definition
-
 INSTALLED_APPS = [
     # django-apps
     'django.contrib.admin',