From e7c6b6fb5239f302be731b7f2dc892f2999316b9 Mon Sep 17 00:00:00 2001
From: Holger Trampe <htrampe@gmail.com>
Date: Tue, 19 May 2020 22:10:22 +0200
Subject: [PATCH] csrf

---
 .../__pycache__/settings.cpython-38.pyc       | Bin 4707 -> 4750 bytes
 digitaleagentur/settings.py                   |   6 +++++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/digitaleagentur/__pycache__/settings.cpython-38.pyc b/digitaleagentur/__pycache__/settings.cpython-38.pyc
index 74cb01dcb7511f393759bc427936e4c4086fbb84..f82bc0ee9647e612f37c1b7f35caed2a0e78eccb 100644
GIT binary patch
delta 391
zcmY+AyGz3W5XO74F-00RAd1%duG(sSKMOvhjdV~`lNQ_a5g%Wy6$DXt!NpA|*`$LV
z-Gr=;{sj&WUHuc>oQ&e)!FLBg?!G(jqwhW<XJxt0=S6Jcb^oO#hpAc`DoYZ#A<UuD
zyV}~01uS9-%TTd`RU``m4nyM(XN*FTPHbSaK+wwqcOlK)2x1F{-Bh3=!7K|!;vVOM
zLN~q0b03%^*x`OiJm6^%yBx(H$FR>suy_~;9JlGr|0w?E5nHNIg>cy7<I!I-W{={i
zBJenldE$=*0FO+<<|)r_8Yeu10wizqEKX6xS<$;i;5j!aoY!<m1#V7dGHEMkt?9<L
zY9zI!l{WN@UKLNTuP?6LTk)ZmWH%iAB${`XdX?f?Q~TGS(#=e@#ne`_hW0a@%Uh<o
xZlyFesTuA`!yU;D-cz4^mkF<2CY-OvJ*snZN<tL<<o7!jW!!mIg3g;#`UZ}|a1H<f

delta 392
zcmXYtxlRIc5XN^_aM7?T2?;9Vg%=)pD=}Vp;{nQo$9N$6t$$ZLOB-Wlr$IVHA*J;`
zfQ_}jgFb>U;6EE@GQY`unM}USW9LtYp4IhgMMiS^<7B;{hv>V|SE>ymfO<5b5kXPO
zjfKznT@W*v#T@1l#{w3yBs|=NWe#CQDA2HqH6*Z(4dJo~n<bYZZpIdpf{-ey+=6Xx
zg%>+Wn|?uZ$0(^5aT_wo$|-|ghkFk9EfOwn#{q}I+=0V8?u5o&vbu4^JvinFPPi92
z?!zhfn{?%Rbvqm|wKA0n`GCSvM;SDuI4i3>gmWJLS3H1JMqu)&yf=mm9*2M?4Nc$@
z7OpI5ktd-VO5{2}Mz*e^qUu%~iaKdOyI(5FYY%vTiDGtJO`QCTMtUWeNoS4B@=`99
nPOK)9hW%9gKzfaQ@SAcIlkFx}4Ev7BQ@r<0scK#E-S_nemo{yh

diff --git a/digitaleagentur/settings.py b/digitaleagentur/settings.py
index 5c80b48..ddb7543 100644
--- a/digitaleagentur/settings.py
+++ b/digitaleagentur/settings.py
@@ -62,7 +62,11 @@ SECRET_KEY = '_qv2t2lmsctjxpbb4rrp=op%_20_hxzonv^mvty1o85c)l$s^q'
 
 ALLOWED_HOSTS = ['digitale-agentur.com', 'www.digitale-agentur.com', '127.0.0.1', 'localhost', 'dev01.digitale-agentur.com', '10.0.2.2']
 
-CSRF_TRUSTED_ORIGINS = ['0.0.0.0', 'digitale-agentur.com', 'www.digitale-agentur.com', '127.0.0.1', 'localhost', 'dev01.digitale-agentur.com']
+#CSRF_TRUSTED_ORIGINS = ['0.0.0.0', 'digitale-agentur.com', 'www.digitale-agentur.com', '127.0.0.1', 'localhost', 'dev01.digitale-agentur.com']
+
+# FORWARD HEADERS
+USE_X_FORWARDED_HOST = True
+SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
 
 # Application definition
 INSTALLED_APPS = [