From bf1533bcd7fb535e747132eef5ad7a52c471a222 Mon Sep 17 00:00:00 2001 From: Andreas Zweili Date: Sat, 30 Dec 2017 17:59:56 +0100 Subject: [PATCH] force django to use ssl --- django/didgeridoo/didgeridoo/settings.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/django/didgeridoo/didgeridoo/settings.py b/django/didgeridoo/didgeridoo/settings.py index 5fd1580..97a551d 100644 --- a/django/didgeridoo/didgeridoo/settings.py +++ b/django/didgeridoo/didgeridoo/settings.py @@ -135,3 +135,6 @@ STATIC_ROOT = '/vagrant/django/didgeridoo/static/' MEDIA_ROOT = '/vagrant/django/didgeridoo/media/' LOGIN_REDIRECT_URL = '/' + +CSRF_COOKIE_SECURE = True +SESSION_COOKIE_SECURE = True