From 318707a44dc7bf67248e8d6f54db0ae5b0e08048 Mon Sep 17 00:00:00 2001
From: Florian Hartmann <flo.ha@posteo.net>
Date: Sun, 19 Dec 2021 18:32:58 +0100
Subject: [PATCH] add CASRF_TRUSTED_DOMAINS for production

---
 financeproject/settings.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/financeproject/settings.py b/financeproject/settings.py
index b35b54c..182af7e 100644
--- a/financeproject/settings.py
+++ b/financeproject/settings.py
@@ -37,6 +37,7 @@ if PRODUCTION:
     DEBUG = False
     ALLOWED_HOSTS = _get_env_allowed_hosts()
     STATIC_ROOT = _get_env_static_root()
+    CSRF_TRUSTED_ORIGINS = ["https://finance.schokobier.de", ]
 else:
     SECRET_KEY = "QetNMYdSKo3kefmltcEeAu52HbyZBxXsROiYesIEwYwnX0rCuv"
     DEBUG = True