Security settings

bakerydemo/settings/production.py

@@ -131,3 +131,13 @@ LOGGING = {
 
 WAGTAILLOCALIZE_PONTOON_GIT_CLONE_DIR = os.getenv('WAGTAILLOCALIZE_PONTOON_GIT_CLONE_DIR', None)
 WAGTAILLOCALIZE_PONTOON_GIT_URL = os.getenv('WAGTAILLOCALIZE_PONTOON_GIT_URL', None)
+
+
+# Security stuff
+
+SECURE_HSTS_SECONDS = 3600
+SECURE_SSL_REDIRECT = True
+SECURE_CONTENT_TYPE_NOSNIFF = True
+SECURE_BROWSER_XSS_FILTER = True
+CSRF_COOKIE_SECURE = True
+X_FRAME_OPTIONS = 'DENY'