From bb30afb4d0a3ca098eba6cc6d0af9b3289c6ce42 Mon Sep 17 00:00:00 2001
From: jschaufuss <jschaufuss@js-devop.de>
Date: Mon, 11 Aug 2025 10:40:01 +0000
Subject: [PATCH] subscribarr/settings.py aktualisiert

---
 subscribarr/settings.py | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/subscribarr/settings.py b/subscribarr/settings.py
index 17d8542..4c6e676 100644
--- a/subscribarr/settings.py
+++ b/subscribarr/settings.py
@@ -104,17 +104,19 @@ AUTH_PASSWORD_VALIDATORS = [
     },
 ]
 
-CSRF_TRUSTED_ORIGINS = [
-    'https://subscribarr.local.js-devop.de',
-    # Weitere vertrauenswürdige Domains können hier hinzugefügt werden
-]
+# Configure CSRF trusted origins via env var for container deployments.
+# Example: DJANGO_CSRF_TRUSTED_ORIGINS="https://subscribarr.example.com,https://app.example.org"
+CSRF_TRUSTED_ORIGINS = [o.strip() for o in os.getenv('DJANGO_CSRF_TRUSTED_ORIGINS', '').split(',') if o.strip()]
+if not CSRF_TRUSTED_ORIGINS:
+    # Fallback default (can be overridden by env)
+    CSRF_TRUSTED_ORIGINS = ['https://subscribarr.local.js-devop.de']
 
 
 
 # Internationalization
 # https://docs.djangoproject.com/en/5.2/topics/i18n/
 
-LANGUAGE_CODE = 'de-de'
+LANGUAGE_CODE = 'en-us'
 
 TIME_ZONE = 'Europe/Berlin'