Keith SmithandClaude Sonnet 4.5 a06b4365ed Add production security settings for HTTPS/SSL ...

Fixes all 4 Django security warnings:
- ✅ security.W004: Added SECURE_HSTS_SECONDS (1 year HSTS)
- ✅ security.W008: Documented SECURE_SSL_REDIRECT=False (NPM handles SSL)
- ✅ security.W012: Enabled SESSION_COOKIE_SECURE
- ✅ security.W016: Enabled CSRF_COOKIE_SECURE

Additional security hardening:
- HSTS with subdomains and preload
- HttpOnly CSRF cookies
- XSS filter enabled
- Content type sniffing prevention
- Clickjacking protection (X-Frame-Options: DENY)

Note: SECURE_SSL_REDIRECT is intentionally False because Nginx Proxy
Manager handles SSL termination and HTTP→HTTPS redirects at the
reverse proxy level.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

2025-12-26 17:33:07 -07:00

..

settings

Add production security settings for HTTPS/SSL

2025-12-26 17:33:07 -07:00

__init__.py

Initial commit: KeepItGoing task management server

2025-12-18 17:41:29 -07:00

asgi.py

Initial commit: KeepItGoing task management server

2025-12-18 17:41:29 -07:00

celery.py

Fix Critical Security Issue: Replace print() with proper logging

2025-12-22 22:34:57 -07:00

urls.py

Add API root endpoint at /api/

2025-12-26 17:24:16 -07:00

views.py

Add API root endpoint at /api/

2025-12-26 17:24:16 -07:00

wsgi.py

Initial commit: KeepItGoing task management server

2025-12-18 17:41:29 -07:00