- Fix ALLOWED_HOSTS configuration in dokploy.json (set to *)
- Update production_settings.py to respect SECURE_SSL_REDIRECT environment variable
- Change startup script to use netcop_hub.production_settings instead of production_https_settings
- Add proper environment variable handling for SSL and CSRF settings
- Resolve SSL redirect conflicts between Dokploy proxy and Django settings
HTTPS FIXES:
- Added TLS/SSL configuration to dokploy.json with Let's Encrypt
- Created production_https_settings.py with proper HTTPS Django settings
- Added SSL redirect, HSTS headers, and secure cookie settings
- Updated Dockerfile and startup script to use HTTPS settings
- Added CSRF trusted origins for both HTTP and HTTPS
- Configured Traefik proxy header handling
SECURITY IMPROVEMENTS:
- Force HTTPS redirect for production
- HTTP Strict Transport Security (HSTS) enabled
- Secure cookies (SESSION_COOKIE_SECURE, CSRF_COOKIE_SECURE)
- XSS protection and content type sniffing prevention
- Proper X-Forwarded-Proto header handling for Dokploy/Traefik
This should resolve HTTPS certificate and redirect issues in Dokploy.