From 6442fb57f9c56929910939d98a583f7fefcca6ed Mon Sep 17 00:00:00 2001 From: James Williams Date: Wed, 23 Sep 2020 18:06:47 +0100 Subject: [PATCH] fix production.py templating --- {{cookiecutter.project_slug}}/config/settings/production.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/{{cookiecutter.project_slug}}/config/settings/production.py b/{{cookiecutter.project_slug}}/config/settings/production.py index 485a419a9..8c246206b 100644 --- a/{{cookiecutter.project_slug}}/config/settings/production.py +++ b/{{cookiecutter.project_slug}}/config/settings/production.py @@ -43,9 +43,9 @@ CACHES = { # SECURITY # ------------------------------------------------------------------------------ -{%- if cookiecutter.use_docker -%} +{% if cookiecutter.use_docker -%} # NOTE headers are managed by the security-headers middleware in traefik.yml -{%- else -%} +{% else -%} # TODO set security headers in your load balancer if possible and remove these # https://docs.djangoproject.com/en/dev/ref/settings/#secure-ssl-redirect SECURE_SSL_REDIRECT = env.bool("DJANGO_SECURE_SSL_REDIRECT", default=True) @@ -62,7 +62,7 @@ SECURE_HSTS_PRELOAD = env.bool("DJANGO_SECURE_HSTS_PRELOAD", default=True) SECURE_CONTENT_TYPE_NOSNIFF = env.bool( "DJANGO_SECURE_CONTENT_TYPE_NOSNIFF", default=True ) -{%- endif -%} +{% endif -%} # https://docs.djangoproject.com/en/dev/topics/security/#ssl-https # https://docs.djangoproject.com/en/dev/ref/settings/#secure-proxy-ssl-header SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")