Merge pull request #172 from womenhackfornonprofits/https-redirects

Https redirects
womenhackfornonprofits · May 13, 2019 · 7bd0d14 · 7bd0d14
2 parents a5a4079 + 6ccc85d
commit 7bd0d14
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/ocdaction/ocdaction/settings/__init__.py b/ocdaction/ocdaction/settings/__init__.py
@@ -80,6 +80,15 @@
 
 WSGI_APPLICATION = 'ocdaction.wsgi.application'
 
+# Security
+SECURE_SSL_REDIRECT = True
+SESSION_COOKIE_SECURE = True
+CSRF_COOKIE_SECURE = True
+SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
+
+PREPEND_WWW = True
+BASE_URL = "https://ocdyouthapp.org"
+ALLOWED_HOSTS = ['www.ocdyouthapp.org', 'ocdyouthapp.org']
 
 # Database
 # https://docs.djangoproject.com/en/1.9/ref/settings/#databases