From abfae696067446fa1815f90e0a491387a3b92224 Mon Sep 17 00:00:00 2001 From: Konrad du Plessis Date: Fri, 12 Jun 2026 22:27:08 +0200 Subject: [PATCH] fix: keep Flatlogic's internal preview domain in ALLOWED_HOSTS The 29 May incident recovery added fox-fitt-payroll-7de4.dev.flatlogic.app to ALLOWED_HOSTS as a VM-side Flatlogic-editor autosave (commit 98f66e9, broken indentation). The 12 Jun audit deploy's git reset --hard discarded it, which would 400 the platform's preview iframe. Committed properly so it survives every future reset-based deploy. Co-Authored-By: Claude Fable 5 --- config/settings.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/config/settings.py b/config/settings.py index 1a79554..82241c4 100644 --- a/config/settings.py +++ b/config/settings.py @@ -51,6 +51,11 @@ ALLOWED_HOSTS = [ "127.0.0.1", "localhost", "foxlog.flatlogic.app", + # Flatlogic's internal preview domain for this app — the platform's + # dashboard iframe loads the site through it. First added 29 May 2026 + # as a VM-side autosave edit during the incident recovery; committed + # properly here so it survives `git reset --hard` deploys. + "fox-fitt-payroll-7de4.dev.flatlogic.app", os.getenv("HOST_FQDN", ""), ]