From 6032ab08391be1d8a9aff610fa4bb0d94d9d1945 Mon Sep 17 00:00:00 2001 From: Lacey Williams Henschel Date: Thu, 12 Jan 2023 09:51:10 -0800 Subject: [PATCH] :snowflake: Add SSL settings for django-allauth --- config/settings.py | 13 +++++++++++++ kube/boost/values.yaml | 7 +++++++ 2 files changed, 20 insertions(+) diff --git a/config/settings.py b/config/settings.py index 221cc00e..49462d58 100755 --- a/config/settings.py +++ b/config/settings.py @@ -289,3 +289,16 @@ SOCIALACCOUNT_PROVIDERS = { }, } } + +# Allow Allauth to use HTTPS when deployed but HTTP for local dev +SECURE_PROXY_SSL_HEADER_NAME = env("SECURE_PROXY_SSL_HEADER_NAME", default=None) +SECURE_PROXY_SSL_HEADER_VALUE = env("SECURE_PROXY_SSL_HEADER_VALUE", default=None) +SECURE_SSL_REDIRECT = env("SECURE_SSL_REDIRECT", default=False) + +if all( + [SECURE_PROXY_SSL_HEADER_NAME, SECURE_PROXY_SSL_HEADER_VALUE, SECURE_SSL_REDIRECT] +): + SECURE_PROXY_SSL_HEADER = ( + SECURE_PROXY_SSL_HEADER_NAME, + SECURE_PROXY_SSL_HEADER_VALUE, + ) diff --git a/kube/boost/values.yaml b/kube/boost/values.yaml index c03fc771..7ea24594 100644 --- a/kube/boost/values.yaml +++ b/kube/boost/values.yaml @@ -80,6 +80,13 @@ Env: fieldRef: fieldPath: metadata.name apiVersion: v1 + + - name: SECURE_PROXY_SSL_HEADER_NAME + value: "HTTP_X_FORWARDED_PROTO" + - name: SECURE_PROXY_SSL_HEADER_VALUE + value: "https" + - name: SECURE_SSL_REDIRECT + value: true - name: SECRET_KEY valueFrom: secretKeyRef: