adding cfrs and htmx settings; updating docker compose files

Author: davidslusser

src/django_project/core/settings.py

@@ -85,6 +85,17 @@
     ]
 
 
+SECURE_HSTS_SECONDS = 0
+SECURE_SSL_REDIRECT: bool = env.bool("SECURE_SSL_REDIRECT", False)
+SESSION_COOKIE_SECURE: bool = env.bool("SESSION_COOKIE_SECURE", True)
+CSRF_COOKIE_SECURE: bool = env.bool("CSRF_COOKIE_SECURE", True)
+CSRF_TRUSTED_ORIGINS: list[str] = [f"https://{host}" for host in ALLOWED_HOSTS]
+
+# Required for HTTP behind Traefik
+SECURE_PROXY_SSL_HEADER: tuple = ("HTTP_X_FORWARDED_PROTO", "http")
+USE_X_FORWARDED_HOST: bool = env.bool("USE_X_FORWARDED_HOST", True)
+
+
 ROOT_URLCONF = "core.urls"
 
 TEMPLATES = [

src/docker/docker-compose.yaml

@@ -12,8 +12,6 @@ services:
     env_file:
       - ../envs/.env.docker-compose
     command: "./entrypoint.sh"
-    ports:
-      - "8000:8000"    
     labels:
       - "traefik.enable=true"
 

src/docker/traefik-compose.yaml

@@ -1,5 +1,3 @@
-version: '3.9'
-
 networks:
   web:
     external: true
@@ -8,8 +6,6 @@ services:
   traefik:
     image: traefik:v3.0
     container_name: traefik
-    env_file:
-      - src/docker/.env.traefik
     command:
       - "--api.dashboard=true"
       - "--providers.docker=true"
@@ -24,14 +20,15 @@ services:
       - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
 
       # Let's Encrypt
-      - "--certificatesresolvers.myresolver.acme.tlschallenge=true"
+      - "--certificatesresolvers.myresolver.acme.httpchallenge=true"
+      - "--certificatesresolvers.myresolver.acme.httpchallenge.entrypoint=web"
       - "--certificatesresolvers.myresolver.acme.email=admin@davidslusser.website"
       - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
 
     ports:
       - "80:80"
       - "443:443"
-      - "8080:8080"
+      - "8000:8000"
 
     volumes:
       - "/var/run/docker.sock:/var/run/docker.sock:ro"