43 lines
1.2 KiB
Python
43 lines
1.2 KiB
Python
from .base import *
|
|
|
|
DEBUG = False
|
|
ALLOWED_HOSTS = os.environ.get('ALLOWED_HOSTS', '').split(',')
|
|
|
|
# PostgreSQL za produkciju (industrijski standard)
|
|
DATABASES = {
|
|
'default': {
|
|
'ENGINE': 'django.db.backends.postgresql',
|
|
'NAME': os.environ.get('DB_NAME'),
|
|
'USER': os.environ.get('DB_USER'),
|
|
'PASSWORD': os.environ.get('DB_PASSWORD'),
|
|
'HOST': os.environ.get('DB_HOST', 'db'),
|
|
'PORT': os.environ.get('DB_PORT', '5432'),
|
|
}
|
|
}
|
|
|
|
# Sigurnosne postavke
|
|
SESSION_COOKIE_SECURE = True
|
|
CSRF_COOKIE_SECURE = True
|
|
SECURE_SSL_REDIRECT = True
|
|
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
|
|
USE_X_FORWARDED_HOST = True
|
|
|
|
# Produkcijski CORS (samo domena na kojoj vrti Astro)
|
|
CORS_ALLOWED_ORIGINS = os.environ.get('CORS_ALLOWED_ORIGINS', '').split(',')
|
|
|
|
# csrf trusted origins za produkciju (env + poznate domene)
|
|
CSRF_TRUSTED_ORIGINS = [
|
|
origin.strip()
|
|
for origin in os.environ.get('CSRF_TRUSTED_ORIGINS', '').split(',')
|
|
if origin.strip()
|
|
] + [
|
|
'https://api-004.captain.mitteworkspace.cloud',
|
|
'https://serviseri-004.captain.mitteworkspace.cloud',
|
|
]
|
|
|
|
# Statika i Mediji
|
|
STATIC_URL = '/static/'
|
|
STATIC_ROOT = '/app/staticfiles'
|
|
MEDIA_URL = '/media/'
|
|
MEDIA_ROOT = '/app/media'
|