ALLOWED_HOSTS from env var

rebkwok · Aug 4, 2024 · eebc6d4 · eebc6d4
1 parent 0662d4e
commit eebc6d4
Showing 1 changed file with 4 additions and 9 deletions.
diff --git a/pipsevents/settings.py b/pipsevents/settings.py
@@ -56,12 +56,11 @@
 else:  # pragma: no cover
     DEBUG = False
 
-ALLOWED_HOSTS = [
-    'booking.thewatermelonstudio.co.uk', 'test.pipsevents.co.uk',
-    'vagrant.pipsevents.co.uk', 'vagrant.booking.thewatermelonstudio.co.uk'
-]
+DOMAIN = "booking.thewatermelonstudio.co.uk"
+ALLOWED_HOSTS = env.list('ALLOWED_HOSTS', default=[DOMAIN])
+
 # https://docs.djangoproject.com/en/4.0/ref/settings/#std:setting-CSRF_TRUSTED_ORIGINS
-CSRF_TRUSTED_ORIGINS = ['https://booking.thewatermelonstudio.co.uk']
+CSRF_TRUSTED_ORIGINS = [f"https://{host}" for host in ALLOWED_HOSTS]
 
 
 CSRF_FAILURE_VIEW = "common.views.csrf_failure"
@@ -511,10 +510,6 @@ def show_toolbar(request):  # pragma: no cover
 NOTICES_COLOUR="rgb(240, 139, 165)"
 NOTICES_SAFE = True
 
-
-DOMAIN = "booking.thewatermelonstudio.co.uk"
-
-
 # STRIPE
 PAYMENT_METHOD = env("PAYMENT_METHOD")