fix: allow forwarded headers

Author: SKairinos

codeforlife/server.py

@@ -112,6 +112,7 @@ def __init__(
             "bind": "0.0.0.0:8080",
             "workers": 1 if mode == "celery" else workers,
             "worker_class": "uvicorn.workers.UvicornWorker",
+            "forwarded_allow_ips": "*",
         }
 
         if mode == "celery":

codeforlife/settings/django.py

@@ -170,6 +170,7 @@ def get_databases():
 SECURE_CONTENT_TYPE_NOSNIFF = True
 SECURE_BROWSER_XSS_FILTER = True
 SECURE_REFERRER_POLICY = "strict-origin-when-cross-origin"
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 
 # Internationalization
 # https://docs.djangoproject.com/en/5.1/topics/i18n/