mirror of
https://github.com/thecyberlearn/quantumtaskai-caprover.git
synced 2026-08-18 12:32:56 +00:00
a08cc04250
HTTPS FIXES: - Added TLS/SSL configuration to dokploy.json with Let's Encrypt - Created production_https_settings.py with proper HTTPS Django settings - Added SSL redirect, HSTS headers, and secure cookie settings - Updated Dockerfile and startup script to use HTTPS settings - Added CSRF trusted origins for both HTTP and HTTPS - Configured Traefik proxy header handling SECURITY IMPROVEMENTS: - Force HTTPS redirect for production - HTTP Strict Transport Security (HSTS) enabled - Secure cookies (SESSION_COOKIE_SECURE, CSRF_COOKIE_SECURE) - XSS protection and content type sniffing prevention - Proper X-Forwarded-Proto header handling for Dokploy/Traefik This should resolve HTTPS certificate and redirect issues in Dokploy.
33 lines
696 B
Docker
33 lines
696 B
Docker
FROM python:3.11-slim
|
|
|
|
WORKDIR /app
|
|
|
|
# Install system dependencies
|
|
RUN apt-get update && apt-get install -y \
|
|
gcc \
|
|
libpq-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy and install Python dependencies
|
|
COPY requirements.txt .
|
|
RUN pip install --no-cache-dir -r requirements.txt
|
|
|
|
# Copy application code
|
|
COPY . .
|
|
|
|
# Set environment variables
|
|
ENV PYTHONUNBUFFERED=1 \
|
|
SECRET_KEY="build-time-dummy-key-change-in-production"
|
|
|
|
# Collect static files
|
|
RUN python manage.py collectstatic --noinput --settings=production_https_settings
|
|
|
|
# Make startup script executable
|
|
RUN chmod +x start-dokploy.sh
|
|
|
|
# Expose port 3000 for Dokploy
|
|
EXPOSE 3000
|
|
|
|
# Use startup script
|
|
CMD ["./start-dokploy.sh"]
|