dormouse/plchweb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Deployment patch

Browse source
This commit is contained in:
Marcel Plch 2022-03-04 17:05:36 +01:00 committed by Marcel Plch
parent 33268ee859
commit 2752900394
Signed by: dormouse
GPG key ID: 2CA77596BC4BDFFE
1 changed files with 17 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
plchweb/settings.py
View file

@ -20,12 +20,12 @@ BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
# See https://docs.djangoproject.com/en/3.0/howto/deployment/checklist/ # See https://docs.djangoproject.com/en/3.0/howto/deployment/checklist/
# SECURITY WARNING: keep the secret key used in production secret! # SECURITY WARNING: keep the secret key used in production secret!
SECRET_KEY = 'f^%0urhe2)0q^*x^=pv$2cs%m3(xjtqw_x+uzm!io=as316=+x' SECRET_KEY = os.urandom(512).hex()
# SECURITY WARNING: don't run with debug turned on in production! # SECURITY WARNING: don't run with debug turned on in production!
DEBUG = True DEBUG = False
ALLOWED_HOSTS = ["127.0.0.1"] ALLOWED_HOSTS = ["plch.xyz", "www.plch.xyz"]
# Application definition # Application definition
@ -122,3 +122,17 @@ STATIC_URL = '/static/'
MEDIA_URL = "/media/" MEDIA_URL = "/media/"
STATIC_ROOT = os.path.join(BASE_DIR, "static/") STATIC_ROOT = os.path.join(BASE_DIR, "static/")
MEDIA_ROOT = os.path.join(BASE_DIR, "media/") MEDIA_ROOT = os.path.join(BASE_DIR, "media/")
SECURE_HSTS_SECONDS = 3600
SECURE_CONTENT_TYPE_NOSNIFF = True
SECURE_BROWSER_XSS_FILTER = True
SECURE_SSL_REDIRECT = True
SESSION_COOKIE_SECURE = True
CSRF_COOKIE_SECURE = True
SECURE_HSTS_INCLUDE_SUBDOMAINS = True
SECURE_HSTS_PRELOAD = True
X_FRAME_OPTIONS = "DENY"
CONN_MAX_AGE = 43200
FILE_UPLOAD_PERMISSIONS = 0o640