mirror of
https://github.com/thecyberlearn/quantumtaskai-caprover.git
synced 2026-08-18 08:52:57 +00:00
HTTPS FIXES: - Added TLS/SSL configuration to dokploy.json with Let's Encrypt - Created production_https_settings.py with proper HTTPS Django settings - Added SSL redirect, HSTS headers, and secure cookie settings - Updated Dockerfile and startup script to use HTTPS settings - Added CSRF trusted origins for both HTTP and HTTPS - Configured Traefik proxy header handling SECURITY IMPROVEMENTS: - Force HTTPS redirect for production - HTTP Strict Transport Security (HSTS) enabled - Secure cookies (SESSION_COOKIE_SECURE, CSRF_COOKIE_SECURE) - XSS protection and content type sniffing prevention - Proper X-Forwarded-Proto header handling for Dokploy/Traefik This should resolve HTTPS certificate and redirect issues in Dokploy.
28 lines
866 B
JSON
28 lines
866 B
JSON
{
|
|
"name": "quantum-tasks-ai",
|
|
"type": "dockerfile",
|
|
"dockerfile": "./Dockerfile.dokploy",
|
|
"port": 3000,
|
|
"healthCheck": "/health/",
|
|
"buildArgs": {},
|
|
"buildOptions": ["--no-cache"],
|
|
"security": {
|
|
"redirectHttpsToHttp": false,
|
|
"forceHttps": true
|
|
},
|
|
"traefik": {
|
|
"tls": true,
|
|
"certResolver": "letsencrypt"
|
|
},
|
|
"env": {
|
|
"PYTHONUNBUFFERED": "1",
|
|
"DEBUG": "false",
|
|
"SECRET_KEY": "production-key-change-this-123456789",
|
|
"ALLOWED_HOSTS": "website-quantumtaskai-wrczik-cc50ac-31-97-62-205.traefik.me,*",
|
|
"DOKPLOY_PROJECT_NAME": "quantum-tasks-ai",
|
|
"SECURE_SSL_REDIRECT": "true",
|
|
"SECURE_PROXY_SSL_HEADER": "HTTP_X_FORWARDED_PROTO,https",
|
|
"CSRF_TRUSTED_ORIGINS": "https://website-quantumtaskai-wrczik-cc50ac-31-97-62-205.traefik.me,http://website-quantumtaskai-wrczik-cc50ac-31-97-62-205.traefik.me"
|
|
}
|
|
}
|