tegwick f95de1482d Fix CSRF 403 on all POSTs behind traefik
prod.py never read the CSRF_TRUSTED_ORIGINS env var the deployment already
injects, so Django's setting stayed empty. Behind traefik's TLS termination
Django saw requests as HTTP and rejected the browser's https:// Origin on
every POST with a CSRF failure (403) — forms could not be saved and the DB
stayed empty.

- Read CSRF_TRUSTED_ORIGINS from env (filtering empties).
- Set SECURE_PROXY_SSL_HEADER so Django recognizes HTTPS via X-Forwarded-Proto.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-22 02:02:42 +02:00
2026-05-08 07:54:06 +02:00
2026-05-14 11:30:30 +02:00
2026-05-08 14:26:48 +02:00
2026-05-14 11:30:30 +02:00
2026-05-08 14:26:48 +02:00
2026-05-18 16:55:54 +02:00
2026-05-18 16:55:54 +02:00
2026-05-08 14:26:48 +02:00
2026-05-07 20:30:13 +00:00
2026-05-08 14:26:48 +02:00
2026-05-08 14:26:48 +02:00
2026-05-08 14:26:48 +02:00
2026-05-07 20:30:13 +00:00
2026-05-18 16:55:54 +02:00

repo-seed

A git repository template to bootstrap coulomb projects from.

Description
Plattform für die effiziente Teilnahme an Vergabeverfahren.
Readme MIT-0 1.1 MiB
Languages
Python 58.4%
HTML 39.4%
CSS 0.9%
Dockerfile 0.7%
Makefile 0.3%
Other 0.2%