diff --git a/CHANGELOG.md b/CHANGELOG.md index d866f22..05cad3d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -24,6 +24,7 @@ and this project adheres to ### Fixed - ♿️(frontend) fix left nav panel #396 +- 🔧(backend) fix configuration to avoid different ssl warning #432 ### Changed diff --git a/src/backend/people/settings.py b/src/backend/people/settings.py index 2975124..d1041e5 100755 --- a/src/backend/people/settings.py +++ b/src/backend/people/settings.py @@ -619,6 +619,14 @@ class Production(Base): # # In other cases, you should comment the following line to avoid security issues. SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https") + SECURE_HSTS_SECONDS = 60 + SECURE_HSTS_PRELOAD = True + SECURE_HSTS_INCLUDE_SUBDOMAINS = True + SECURE_SSL_REDIRECT = True + SECURE_REDIRECT_EXEMPT = [ + "^__lbheartbeat__", + "^__heartbeat__", + ] # Modern browsers require to have the `secure` attribute on cookies with `Samesite=none` CSRF_COOKIE_SECURE = True