From 2352dbe35a15c118bb1e4e0a6ad384233df2fb14 Mon Sep 17 00:00:00 2001
From: Martin Bauer <martin@bauer.tech>
Date: Thu, 9 Apr 2026 15:29:35 +0200
Subject: [PATCH] Deployment changes

---
 blechreiz/database.sqlite | Bin 1363968 -> 1363968 bytes
 blechreiz/settings.py     |   6 ++++--
 docker-compose.yml        |   9 ++++++++-
 3 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/blechreiz/database.sqlite b/blechreiz/database.sqlite
index f1c7d515251d86ae7bf4db381908d00665dde903..18a491abc3806d658b71889671d46917fdc9f89b 100644
GIT binary patch
delta 387
zcmZoz5ZtgJc!D&e{X`jOM*EEkOM*F=82cEQjx+XcHk{MMsM%!Nr^D*oT<MscmYADS
zWnx-VoMTv!Q<P$mRb^ainp2u;oMDicpKLt&L)dZ8f}j8^H-BBjkn%{^K#S0_5SQGF
z%3LGA?9igh6ra@03eTc6?|6^A!faFjG$&6Z10yqC0~1{%V+BKFD<exQ17kfCGfOiw
zqvqpb?Z?9yftYFg@i1n=Fh01vsVPvt{n;93AZ7t#Rv=~rVs;?r0Afxc<^p1FAm-Wr
zYz?p6Vh(YJX$%aH7^Y1Z@L`get`xv0G~J3tP;l}E6@N8VW?v>ko@3W(-xI(G#QZ=k
z0K|eoEVO-3fUxUk76t|e+3Bn-BHB#M2c{dai0ExkU=c}RR*+|QWWw!3cAf1H*hLgh
F004FIf8_uG

delta 242
zcmZoz5ZtgJc!D&e%|sbzMw^WZOM=-LnT|6s9p7v?XD?Ip@v!#eVT?e`wEcJ(vtSsX
zk(H^Xm5Gs_nT3ggiAnpjHOxTF0>rF9%m&2lK+FNeoIuP4#N0s4v;El`Ub)57S*CEw
zO;-uv6Pm8)Ae5@CmYiK!VUS;(Yn+u;R#K8&o@-%LS#F$InV+9$lx1X=#4gpoCx8!#
z`GHsfhy{UIX#1W3Vb{$p%m)}`rn9n$X!A22V0ysJz^uURz?{I`z&zdY50B#Z1QwA5
YW)=np28D@^GSh)Pp6zegMMO>j0HU~6(f|Me

diff --git a/blechreiz/settings.py b/blechreiz/settings.py
index 64eb746..c4e744c 100644
--- a/blechreiz/settings.py
+++ b/blechreiz/settings.py
@@ -45,7 +45,9 @@ EMAIL_USE_TLS = False
 
 
 # Hosts/domain names that are valid for this site; required if DEBUG is False
-ALLOWED_HOSTS = ["localhost", "127.0.0.1", ".blechreiz.com", ".bauer.tech", ".br.tech"]
+ALLOWED_HOSTS = ["localhost", "127.0.0.1", ".blechreiz.com", ".bauer.tech"]
+
+CSRF_TRUSTED_ORIGINS = ["https://br.bauer.tech", "https://*.bauer.tech", "https://*.blechreiz.com"]
 
 # Local time zone for this installation.
 TIME_ZONE = "Europe/Berlin"
@@ -179,7 +181,7 @@ GCAL_COUPLING = {
     "clientId": "34462582242-4kpdvvbi27ajt4u22uitqurpve9o8ipj.apps.googleusercontent.com",
     "client_secret": os.environ.get("GCAL_CLIENT_SECRET", ""),
     "credentials_file": PROJECT_PATH + "/calendarCredentials.dat",
-    "push_url": "https://blechreiz.bauer.tech/eventplanner_gcal/gcalApiCallback",
+    "push_url": "https://br.bauer.tech/eventplanner_gcal/gcalApiCallback",
 }
 
 
diff --git a/docker-compose.yml b/docker-compose.yml
index 7c8d3b4..eceafa2 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -10,9 +10,16 @@ services:
       dockerfile: Dockerfile
     volumes:
       - .:/app                           # git repo is the live source
+    environment:
+      - VIRTUAL_HOST=br.bauer.tech
+      - VIRTUAL_PORT=8000
     env_file:
       - blechreiz/.env
     ports:
-      - "127.0.0.1:8000:8000"           # only localhost; HTTPS handled by external proxy
+      - "8000:8000"           # only localhost; HTTPS handled by external proxy
     restart: unless-stopped
 
+networks:
+  default:
+    name: nginx-proxy
+    external: true