From 1113cc3dbe0a389e70723178daf1e071bc314d45 Mon Sep 17 00:00:00 2001
From: AntoniyaBK <antoniak12@abv.bg>
Date: Tue, 23 Dec 2025 10:59:11 +0200
Subject: [PATCH] Suggest updated prod.env settings for trusted domains and
 reverse proxy

---
 config/prod.env | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/config/prod.env b/config/prod.env
index 27ec583..9954919 100644
--- a/config/prod.env
+++ b/config/prod.env
@@ -129,7 +129,12 @@ AXES_IPWARE_META_PRECEDENCE_ORDER=HTTP_X_FORWARDED_FOR,REMOTE_ADDR
 DJANGO_DEBUG=False
 WGER_USE_GUNICORN=True
 EXERCISE_CACHE_TTL=18000 # in seconds - 5*60*60, 5 hours
+
+# Site configuration //In production, when using SSL/HTTPS, SITE_URL should be changed to https://yourdomain.com, 
+# Set DJANGO_ALLOWED_HOSTS and DJANGO_CSRF_TRUSTED_ORIGINS to your real domain with HTTPS.
 SITE_URL=http://localhost
+# DJANGO_ALLOWED_HOSTS=yourdomain.com
+# DJANGO_CSRF_TRUSTED_ORIGINS=https://yourdomain.com
 
 #
 # JWT auth