peter f2f2a9c96b Close out issue 001: document CSRF/reverse-proxy requirement ... The app-side fix (CSRF_TRUSTED_ORIGINS, SECURE_PROXY_SSL_HEADER in settings.py) was already committed as d458cd3 after the first Cloud-VM-1 deployment hit "CSRF verification failed" on login behind Apache. This finishes the rest of that issue's checklist: documents DJANGO_CSRF_TRUSTED_ORIGINS in deploy/env.example, adds the required X-Forwarded-Proto header to the Apache/Caddy examples in cloud_agent_deploy.md (plus a checklist item that verifies via an actual login, not just an unauthenticated capabilities curl), and adds the same proxy-agnostic guidance to docs/deployment.md. Also introduces issues/, a tracked one-file-per-issue log for the project going forward. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>		2026-09-02 12:28:41 +01:00
..
agent_quickstart.md	Add generic deployment docs and fix stale references	2026-09-01 22:14:34 +01:00
api.md	Add generic deployment docs and fix stale references	2026-09-01 22:14:34 +01:00
deployment.md	Close out issue 001: document CSRF/reverse-proxy requirement	2026-09-02 12:28:41 +01:00
llm_posting_helper.md	Initial public commit	2026-09-01 21:55:02 +01:00