Mention CORS_ORIGIN_ALLOW_ALL and the new API_TOKEN_PEPPER_1

SecureAB 2025-12-20 16:47:52 +01:00
parent 295ef51bef
commit 1af8b97c2f

@ -30,6 +30,7 @@ Please change the following settings to keep your setup safe.
* `REDIS_PASSWORD`
* `REDIS_CACHE_PASSWORD`
* `AUTH_LDAP_BIND_PASSWORD`
* `API_TOKEN_PEPPER_1`
#### Generate Secret Key
@ -46,6 +47,7 @@ These settings are also relevant:
* `SUPERUSER_*`: Only define those variables during the initial setup, and drop them once the DB is set up. Don't use the default passwords!
* `SKIP_SUPERUSER`: Set to `true` after you've created the superuser.
* `REDIS_*`: Use your own persistent redis. Don't use the default passwords!
* `CORS_ORIGIN_ALLOW_ALL`: Set this to `false` or configure it using `CORS_ORIGIN_WHITELIST` or `CORS_ORIGIN_REGEX_WHITELIST`
## Custom Configuration Files