Commit Graph

1 Commits

Author SHA1 Message Date
thecyberlearn
a08cc04250 🔒 Fix HTTPS configuration for Dokploy deployment
HTTPS FIXES:
- Added TLS/SSL configuration to dokploy.json with Let's Encrypt
- Created production_https_settings.py with proper HTTPS Django settings
- Added SSL redirect, HSTS headers, and secure cookie settings
- Updated Dockerfile and startup script to use HTTPS settings
- Added CSRF trusted origins for both HTTP and HTTPS
- Configured Traefik proxy header handling

SECURITY IMPROVEMENTS:
- Force HTTPS redirect for production
- HTTP Strict Transport Security (HSTS) enabled
- Secure cookies (SESSION_COOKIE_SECURE, CSRF_COOKIE_SECURE)
- XSS protection and content type sniffing prevention
- Proper X-Forwarded-Proto header handling for Dokploy/Traefik

This should resolve HTTPS certificate and redirect issues in Dokploy.
2025-09-05 09:44:21 +05:30