History

peter f2f2a9c96b Close out issue 001: document CSRF/reverse-proxy requirement The app-side fix (CSRF_TRUSTED_ORIGINS, SECURE_PROXY_SSL_HEADER in settings.py) was already committed as `d458cd3` after the first Cloud-VM-1 deployment hit "CSRF verification failed" on login behind Apache. This finishes the rest of that issue's checklist: documents DJANGO_CSRF_TRUSTED_ORIGINS in deploy/env.example, adds the required X-Forwarded-Proto header to the Apache/Caddy examples in cloud_agent_deploy.md (plus a checklist item that verifies via an actual login, not just an unauthenticated capabilities curl), and adds the same proxy-agnostic guidance to docs/deployment.md. Also introduces issues/, a tracked one-file-per-issue log for the project going forward. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-02 12:28:41 +01:00
..
001-csrf-behind-reverse-proxy.md	Close out issue 001: document CSRF/reverse-proxy requirement	2026-09-02 12:28:41 +01:00
README.md	Close out issue 001: document CSRF/reverse-proxy requirement	2026-09-02 12:28:41 +01:00

peter f2f2a9c96b Close out issue 001: document CSRF/reverse-proxy requirement

The app-side fix (CSRF_TRUSTED_ORIGINS, SECURE_PROXY_SSL_HEADER in
settings.py) was already committed as d458cd3 after the first Cloud-VM-1
deployment hit "CSRF verification failed" on login behind Apache. This
finishes the rest of that issue's checklist: documents
DJANGO_CSRF_TRUSTED_ORIGINS in deploy/env.example, adds the required
X-Forwarded-Proto header to the Apache/Caddy examples in
cloud_agent_deploy.md (plus a checklist item that verifies via an actual
login, not just an unauthenticated capabilities curl), and adds the same
proxy-agnostic guidance to docs/deployment.md.

Also introduces issues/, a tracked one-file-per-issue log for the project
going forward.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-02 12:28:41 +01:00

001-csrf-behind-reverse-proxy.md Close out issue 001: document CSRF/reverse-proxy requirement 2026-09-02 12:28:41 +01:00

README.md Close out issue 001: document CSRF/reverse-proxy requirement 2026-09-02 12:28:41 +01:00

README.md

Issues

One file per issue: NNN-short-slug.md, numbered sequentially. Each file has a title, status (Open / Fixed / By design), description, and resolution once closed.