Production.py

import os

# DB variables
import dj_database_url

from .base import *

db_from_env = dj_database_url.config(conn_max_age=500)

# SECURITY WARNING: keep the secret key used in production secret!
# SECRET_KEY = os.environ.get("EVE_SECRET_KEY")
SECRET_KEY = "SECRET_KEY"

ALLOWED_HOSTS = [
    "localhost",
    "127.0.0.1",
    ".fly.dev",
]

DATABASES = {"default": db_from_env}

# Tied to the Whitenoice library/middleware
STATICFILES_STORAGE = "whitenoise.storage.CompressedManifestStaticFilesStorage"

# HTTPS Settings
# SESSION_COOKIE_SECURE = True
# CSRF_COOKIE_SECURE = True
# SECURE_SSL_REDIRECT = True

# HSTS Settings
# SECURE_HSTS_SECONDS = 31536000  # 1 YEAR
# SECURE_HSTS_PRELOAD = True
# SECURE_HSTS_INCLUDE_SUBDOMAINS = True

# CSRF_COOKIE_DOMAIN = "eve-connect-dev-api.fly.dev"
CSRF_TRUSTED_ORIGINS = ["https://deploymentdomain.fly.dev"]
CSRF_ORIGIN_WHITELIST = ["https://deploymentdomain.fly.dev"]
CORS_ALLOWED_ORIGINS = ["https://deploymentdomain.fly.dev"]

# CORS Headers
# CORS_ALLOWED_ORIGINS = [
#     "https://deploymentdomain.fly.dev",
#     "https:127.0.0.1",
# ]