diff --git a/gmba_django/settings/production.py b/gmba_django/settings/production.py index 038ece5..13ba57a 100644 --- a/gmba_django/settings/production.py +++ b/gmba_django/settings/production.py @@ -17,6 +17,9 @@ DATABASES = { SECURE_SSL_REDIRECT = True +# See https://docs.djangoproject.com/en/2.2/ref/settings/#secure-proxy-ssl-header +SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https') + SESSION_COOKIE_SECURE = True CSRF_COOKIE_SECURE = True