Вынести хосты и CSRF токены в окружение

blog/blog/settings.py

@@ -21,6 +21,8 @@ env = environ.Env(
     # set casting, default value
     DEBUG=(bool, False),
     DEVELOPMENT_MODE=(bool, False),
+    ALLOWED_HOSTS=(list, "127.0.0.1"),
+    CSRF_TRUSTED_ORIGINS=(list, "http://127.0.0.1"),
 )
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
@@ -36,10 +38,8 @@ SECRET_KEY = env("SECRET_KEY")
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = env("DEBUG")
 DEVELOPMENT_MODE = env("DEVELOPMENT_MODE")
-ALLOWED_HOSTS = ["127.0.0.1"]
-CSRF_TRUSTED_ORIGINS = [
-    "http://127.0.0.1:50505",
-]
+ALLOWED_HOSTS = env("ALLOWED_HOSTS")
+CSRF_TRUSTED_ORIGINS = env("CSRF_TRUSTED_ORIGINS")
 
 # Application definition