diff --git a/babybuddy/settings/base.py b/babybuddy/settings/base.py index 4d0122a1..d90b3be5 100644 --- a/babybuddy/settings/base.py +++ b/babybuddy/settings/base.py @@ -269,13 +269,6 @@ AXES_FAILURE_LIMIT = 5 ROLLING_SESSION_REFRESH = 86400 -# Security -# See https://docs.djangoproject.com/en/3.2/topics/http/sessions/#settings -# See https://docs.djangoproject.com/en/3.2/ref/csrf/#settings - -SESSION_COOKIE_SECURE = True -CSRF_COOKIE_SECURE = True - # Set default auto field for models. # See https://docs.djangoproject.com/en/3.2/releases/3.2/#customizing-type-of-auto-created-primary-keys diff --git a/babybuddy/settings/production.example.py b/babybuddy/settings/production.example.py index 928ae4c3..44ce28d9 100644 --- a/babybuddy/settings/production.example.py +++ b/babybuddy/settings/production.example.py @@ -7,7 +7,6 @@ SECRET_KEY = '' ALLOWED_HOSTS = [''] - # Database # https://docs.djangoproject.com/en/3.0/ref/settings/#databases @@ -18,8 +17,17 @@ DATABASES = { } } - # Media files # https://docs.djangoproject.com/en/3.0/topics/files/ MEDIA_ROOT = os.path.join(BASE_DIR, '../data/media') + +# Security +# After setting up SSL, uncomment the settings below for enhanced security of +# application cookies. +# +# See https://docs.djangoproject.com/en/3.2/topics/http/sessions/#settings +# See https://docs.djangoproject.com/en/3.2/ref/csrf/#settings + +# SESSION_COOKIE_SECURE = True +# CSRF_COOKIE_SECURE = True