Sajeyks d433708f86 Add production HTTPS and proxy settings ... - Session and CSRF cookies are secure-only unless DEBUG is on. - TRUST_X_FORWARDED_PROTO honours X-Forwarded-Proto from a TLS terminating ingress. Without it, Django 4+ fails the CSRF origin check on every form POST. - CSRF_TRUSTED_ORIGINS, SECURE_SSL_REDIRECT and SECURE_HSTS_SECONDS are configurable and off by default. HSTS for subdomains and preload are left to ungleich, since they affect all of *.ungleich.ch.		2026-11-06 15:27:27 +03:00
..
migrations	Keep passwords out of activation links	2026-11-06 15:02:41 +03:00
static	added red btn similar to blue one	2019-04-16 11:52:22 -04:00
templates	Use {% load static %} in templates	2026-11-06 15:06:00 +03:00
tests	Time out requests to the OTP server	2026-11-06 15:26:48 +03:00
__init__.py	Move project files to root directory	2019-02-17 17:43:06 +01:00
backends.py	Replace django-auth-ldap and python-ldap with an ldap3 backend	2026-11-06 15:15:03 +03:00
forms.py	Remove APIs that Django 4.0 drops	2026-11-06 15:08:02 +03:00
models.py	Keep passwords out of activation links	2026-11-06 15:02:41 +03:00
settings.py	Add production HTTPS and proxy settings	2026-11-06 15:27:27 +03:00
ungleich_ldap.py	Support multiple LDAP servers with failover	2026-11-06 15:21:45 +03:00
urls.py	Remove APIs that Django 4.0 drops	2026-11-06 15:08:02 +03:00
views.py	Time out requests to the OTP server	2026-11-06 15:26:48 +03:00
wsgi.py	Move project files to root directory	2019-02-17 17:43:06 +01:00