From 99a68c1578cc65d2ede829786c7121cca01a511c Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias.brunner@vshn.ch>
Date: Fri, 21 Mar 2025 14:59:37 +0100
Subject: [PATCH] configure csrf trusted origins

---
 src/servala/settings.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/servala/settings.py b/src/servala/settings.py
index ef9932d..580473b 100644
--- a/src/servala/settings.py
+++ b/src/servala/settings.py
@@ -26,6 +26,7 @@ BASE_DIR = Path(__file__).resolve().parent.parent
 ALLOWED_HOSTS = []
 if allowed_hosts := os.environ.get("SERVALA_ALLOWED_HOSTS"):
     ALLOWED_HOSTS = allowed_hosts.split(",")
+    CSRF_TRUSTED_ORIGINS = [f"https://{h}" for h in ALLOWED_HOSTS]
 
 db_name = os.environ.get("SERVALA_DB_NAME", "")
 if SERVALA_ENVIRONMENT == "development" and not db_name: