configure csrf trusted origins

deployment/kustomize/base/portal/deployment.yaml

@@ -21,17 +21,6 @@ spec:
         - name: servala
           image: servala-2nkgm.app.codey.ch/servala/servala-portal:latest
           imagePullPolicy: Always
-          readinessProbe:
-            httpGet:
-              path: /admin/
-              port: 8080
-            periodSeconds: 60
-          livenessProbe:
-            httpGet:
-              path: /admin/
-              port: 8080
-            periodSeconds: 60
-            initialDelaySeconds: 5
           ports:
             - name: http
               containerPort: 8080

src/servala/settings.py

@@ -26,6 +26,7 @@ BASE_DIR = Path(__file__).resolve().parent.parent
 ALLOWED_HOSTS = []
 if allowed_hosts := os.environ.get("SERVALA_ALLOWED_HOSTS"):
     ALLOWED_HOSTS = allowed_hosts.split(",")
+    CSRF_TRUSTED_ORIGINS = [f"https://{h}" for h in ALLOWED_HOSTS]
 
 db_name = os.environ.get("SERVALA_DB_NAME", "")
 if SERVALA_ENVIRONMENT == "development" and not db_name: