diff --git a/collection/collection/environments/production.py b/collection/collection/environments/production.py index ceb3716..a7217a3 100644 --- a/collection/collection/environments/production.py +++ b/collection/collection/environments/production.py @@ -32,3 +32,14 @@ DATABASES = { 'PORT': os.getenv('POSTGRES_PORT', '5432'), } } + +# Security +SECURE_HSTS_SECONDS = 3600 +SECURE_HSTS_INCLUDE_SUBDOMAINS = True +SECURE_HSTS_PRELOAD = True +SECURE_CONTENT_TYPE_NOSNIFF = True +SECURE_BROWSER_XSS_FILTER = True +SECURE_SSL_REDIRECT = True +SESSION_COOKIE_SECURE = True +CSRF_COOKIE_SECURE = True +X_FRAME_OPTIONS = 'DENY'