403 forbidden about zentral HOT 3 CLOSED

This has to do with the way Django is getting the host information behind nginx. It is not really working as is if the exposed nginx port is changed in docker-compose.yml.

To make it work, you have to make 2 changes

1. in the nginx conf, replace this line with:

proxy_set_header X-Forwarded-Host $host:8083;

2. in the django settings, add this line:

USE_X_FORWARDED_HOST = True

this way, the request.get_host() Django method will return zentral:8083, and the CSRF referrer check will pass.

from zentral.

Do not forget to edit the base.json file and add the port to the tls_hostname.

from zentral.

Thanks so much @np5 - this has fixed things for me, really appreciate your help.

from zentral.