Setting up SSL in settings.py

[OmidShojaee]

Hello,

I have SSL certificate installed on my web server.
Web server is configured to redirect http to https.

I have the following parameters in my settings.py:

SESSION_COOKIE_SECURE = True
CSRF_COOKIE_SECURE = True
SECURE_HSTS_SECONDS = 31536000

Anything else is required?

[marcorichetta]

You can look here to see Django settings related to SSL/HTTPS.
https://docs.djangoproject.com/en/3.1/topics/security/#ssl-https

[OmidShojaee]

Where do you think I’ve got those parameters?

People on this site are very interesting. The ONLY thing they know is how to post a link to Django documentation!

[KenWhitesell]

I’m curious, why do you think we should rewrite or copy/paste the documentation when the specific answer to a question is in that documentation?

You asked the question:

@OmidShojaee

Anything else is required?

The documentation linked to so kindly by @marcorichetta answers your question. If you’re having a specific problem with something in that document, you can always ask for clarification here. But yes, the expectation is that you will do your part and read it first.

@OmidShojaee

The ONLY thing they know is how to post a link to Django documentation!

In your particular case, your comment is factually incorrect considering the following:

Is it a bad idea to develop my project directly on production server?

and if not, from security perspective what should I do - besides disabling the debug mode - when development is finished?

Convert view to class-based

Hi, I prefer to learn things by example. Here’s my current view to retrieve a single post: def post_detail(request, year, month, day, post): post = get_object_or_404(Post, slug=post, status='published', publish__year=year, publish__month=month, publish__day=day) return render(request, 'blog/post/detail.html', {'post': post}) How to convert it to class-based?

Form saves an empty row in the database

Hello, I have a simple “newsletter” signup form. It is defined as below: The model is created like this: class Subscriber(models.Model): email = models.EmailField(max_length=254) def __str__(self): return self.email This is the form to subscribe: <form action="" id="newsletterForm" method="post" role="form"> {% csrf_token %} <input type="email" name="email" required><input type="submit" value="Subscribe"> …

Trailing slash is missing

Hello, I’m writing a Blog app with the help of a book. I have this in my urls.py: path('<int:year>/<int:month>/<int:day><slug:post>/', views.post_detail, name='post_detail'), and in the models.py this function generates the link to each blog post: def get_absolute_url(self): return reverse('blog:post_detail', args=[self.publish.year, self.publish.month, self.publish.day, self.slug]) However, the link is generated like “2020/12/9slug” not “2020/12/9/slug”. As far as I know, the reverse …

No SITE_ROOT in settings.py

Hello, In many tutorials they talk about PROJECT_PATH, but I don’t have it in my settings.py, neither I can find it in the official documentation. Is this depreciated? If not, how it should be defined?

Have just one base.html and static folder shared between all apps?

Hello, I need to have just one base.html template shared between all apps. What I’m thinking now is to have a “templates” folder under project, and put the base.html inside that. For each app I’ll follow the standard method (appname/templates/appname). But I don’t know how to put that into work.

NoReverseMatch after switching to generic views

Hello, I am following this tutorial After switching to generic views, I receive NoReverseMatch The error message: Reverse for ‘vote’ with arguments ‘(1,)’ not found. 1 pattern(s) tried: [‘polls/<int:question_id/vote/$’] And the error line is 5. <h1>{{ question.question_text }}</h1> 2 3 {% if error_message %}<p><strong>{{ error_message }}</strong></p>{% endif %} 4 5 <form action="{% url 'polls:vote' question.id %}" method=post> 6 {% csrf_token %} 7 {% for choice in question.choice_set.all …

[OmidShojaee]

First, the documentation is the first step for every developer! When people come here and ask question, it is obvious that something is not clear!!! The problem is, you guys don’t have any real-world experience and all you know is what is written in the documentation!!!

For example in the documentation there is SECURE_SSL_REDIRECT which is absolutely NOT necessary in my setup because I do that on ngnix level! So if I follow the documentation only, I would have it in my settings while it has no use and propably creates issues instead of being useful!

All my questions which you have mentioned are real-case scenarios and none of them are explained in the documentation! From 1992 when I started to learn Turbo Pascal till now my only reference are books and later online tutorials and Django’s is the worst one EVER!

So, from now on please stay away from my topic if all you know is how to post a link!

[KenWhitesell]

@OmidShojaee

So if I follow the documentation only, I would have it in my settings while it has no use and propably creates issues instead of being useful!

See SECURE_SSL_REDIRECT for the caveats when using it in an environment for which it’s not needed.

@OmidShojaee

So, from now on please stay away from my topic if all you know is how to post a link!

We’re building a knowledge base here. We’re not just answering questions for your immediate needs but also for those coming along later and looking for information.
If a general question is best-answered by a link to the documentation, then yes, I’m going to supply an answer as a link to the relevant page.
If a question is asked in sufficient detail such that it’s clear that the documentation has been referenced and the question identifies a specific issue needing to be addressed, then I’m more likely to provide supplemental information.

I would also suggest that you try to moderate your “tone” some. Comments about people are not appropriate here. See the FAQ and the related Django Code of Conduct

[marcorichetta]

I really appreciate your clarification, @KenWhitesell.

@OmidShojaee

Anything else is required?

If your question had been more detailed, maybe I would not have answered with just a link.@OmidShojaee