Added settings for production environments.

LCOGT · Nov 21, 2024 · 789d7d2 · 789d7d2
1 parent 966b85d
commit 789d7d2
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 5 deletions.
diff --git a/banzai_floyds_ui/gui/app.py b/banzai_floyds_ui/gui/app.py
@@ -19,7 +19,6 @@
 from banzai_floyds.frames import FLOYDSFrameFactory
 from banzai_floyds import settings
 from django.conf import settings as django_settings
-from banzai_floyds.utils.profile_utils import profile_fits_to_data
 import os
 import banzai.main
 import io

diff --git a/banzai_floyds_ui/settings.py b/banzai_floyds_ui/settings.py
@@ -22,13 +22,18 @@
 # See https://docs.djangoproject.com/en/4.1/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = 'django-insecure-0*$4nwm8zd$jcc*xlwm$2nm_=r6bn5rv@#k7jrta^dy&c*3)(y'
+SECRET_KEY = os.getenv('SECRET_KEY', 'django-insecure-0*$4nwm8zd$jcc*xlwm$2nm_=r6bn5rv@#k7jrta^dy&c*3)(y')
 
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = True
+DEBUG = os.getenv('DEBUG', False)
 
-ALLOWED_HOSTS = ['*']
+ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', '*').split(',')
 
+SECURE_SSL_REDIRECT = not DEBUG
+
+SESSION_COOKIE_SECURE = not DEBUG
+
+CSRF_COOKIE_SECURE = not DEBUG
 
 # Application definition
 
@@ -93,7 +98,7 @@
         'default':
             {
                 'BACKEND': 'django_redis.cache.RedisCache',
-                "LOCATION": os.environ['REDIS_URL'],
+                "LOCATION": f"redis://{os.eniron['REDIS_HOST']}/{os.environ['REDIS_PORT']}",
                 'OPTIONS': {'CLIENT_CLASS': 'django_redis.client.DefaultClient'}
             }
     }