Configure ALLOWED_HOSTS

Possibly we'll just want to hardcode this to `*` on the basis that we're capable of enforcing the right thing elsewhere in the chain, but I'm being conservative for now.
opensafely-core · Jan 19, 2024 · 9edd16c · 9edd16c
1 parent 4220cf4
commit 9edd16c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/airlock/settings.py b/airlock/settings.py
@@ -54,7 +54,7 @@ def get_env_var(name):
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = get_env_var("DJANGO_DEBUG") == "True"
 
-ALLOWED_HOSTS = []
+ALLOWED_HOSTS = get_env_var("DJANGO_ALLOWED_HOSTS").split(",")
 
 
 # Application definition

diff --git a/dotenv-sample b/dotenv-sample
@@ -1,7 +1,7 @@
 # Default environment variables for local development
 
 DJANGO_DEBUG=True
-
 DJANGO_SECRET_KEY="INSECURE-if-you-use-this-in-prod-you-will-have-a-bad-day"
+DJANGO_ALLOWED_HOSTS="*"
 
 AIRLOCK_WORK_DIR=workdir/