prepare for prod

backend/settings.py

@@ -37,7 +37,8 @@ DEBUG = config('DEBUG', default=False, cast=bool)
 
 ALLOWED_HOSTS = config('ALLOWED_HOSTS', default=[], cast=Csv())
 
-SITE_DOMAIN = "http://risklet.kompanijabroj4.com"
+SITE_DOMAIN = "https://risklet.com"
+#SITE_DOMAIN = "http://risklet.kompanijabroj4.com"
 #SITE_DOMAIN = "http://127.0.0.1:8000"
 
 # Application definition
@@ -168,3 +169,9 @@ CELERY_ACCEPT_CONTENT = ['json']
 CELERY_TASK_SERIALIZER = 'json'
 CELERY_TIMEZONE = 'UTC'
 
+SECURE_SSL_REDIRECT = True
+SESSION_COOKIE_SECURE = True
+CSRF_COOKIE_SECURE = True
+SECURE_HSTS_SECONDS = 31536000
+SECURE_HSTS_INCLUDE_SUBDOMAINS = True
+SECURE_HSTS_PRELOAD = True