403 Forbidden / CSRF verification fails when behind reverse proxy
jsravn opened this issue · 0 comments
jsravn commented
Hi, I'm trying to run bragibooks behind a reverse proxy w/ https. However CSRF verification fails, because django isn't aware of the external hostname. Is there any way around this? Looks like you can set CSRF_TRUSTED_ORIGINS in settings.py for this, but I don't think the Docker image exposes it. Thanks!
Forbidden (Origin checking failed - https://mydomain.example.com does not match any trusted origins.): /import/