1 $%{config/use_tls:?# Set SSL proxy settings:

     2 # Pass this header from the proxy after terminating the SSL,

     3 # and don't forget to strip it from the client's request.

     4 # For more information see:

     5 # https:\/\/docs.djangoproject.com\/en\/1.8\/ref\/settings\/#secure-proxy-ssl-header

     6 SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')

     7 

     8 # If Horizon is being served through SSL, then uncomment the following two

     9 # settings to better secure the cookies from security exploits

    10 CSRF_COOKIE_SECURE = True

    11 SESSION_COOKIE_SECURE = True

    12 }