From a0758d4015697b698e14c87dded77baf60134097 Mon Sep 17 00:00:00 2001
From: Flatlogic Bot <support@flatlogic.com>
Date: Thu, 4 Jun 2026 17:14:08 +0000
Subject: [PATCH] 1.0.2

---
 config/__pycache__/settings.cpython-311.pyc | Bin 5867 -> 6760 bytes
 config/settings.py                          |  23 +++++++++++++++-----
 2 files changed, 18 insertions(+), 5 deletions(-)

diff --git a/config/__pycache__/settings.cpython-311.pyc b/config/__pycache__/settings.cpython-311.pyc
index f77a9c1a223d0b61cbccc6ce33ee354c44fbd5cf..90dfc3c2b1efb2aec072b6eeda5ef61bbfb0759f 100644
GIT binary patch
delta 2275
zcmah}OH3O_7@mD#)+{!D;0F+5hY*5!_yHtoUZfCSCIQqEde{qc`4`y8#MbVH6jarz
zO4X=p)kxc_sgwha)HGG9ii%6s_RwS66Gkgx?WK`=iPVd$^iXkWXZ#5ECThn1znS^}
zng2ceXYZ4N&aZ8@I)ul}!y{MU^CI*I*_20pY4P-(n(sU9RAvJScHlP<)PoJ|&_E;6
zj)}QiP(coZ1DyA1gdSolj{6keVJeOn+;IK>jYZ1{x{ohEL?}~IA~b*-JJARp@V?Bv
zN&cKMliX)^row#LzTg1=1`-|5{3^TUfF{9-$py`V8&l&Ff|h%f;KB1DJbR&4@WElh
z4*|?+f*{5t_b7>iw!7>SB{acNp&8oYn8~S*l2e&yNi`ifZuZ(F?|g|o1ohQLGu`ik
zZX(YdR26!l7yBK)TPsmQ3q&A_cM*scu&;pq61Bt%hhRWxg%iSIoR<KmAe<DAh*mhY
z&LbqW!7DhERya*|cs^5_&ysnOF=d!R!cpxc8=Mx}O%4v40}x0KJ4~l8z^m0^7JF0s
znQ3B%z^Ub!fNi)kRa%twP#3j-nDg!~ldcgM)%KaQ@op1;492T%2t6>dflR03Vo&v{
z&0g)@hQ?u-tbQ)01Rx<ScFQze61w2B5P>Nnijy{7NM#I|SrnStZmW5p(!R8Lt>5Cd
z{2aZFHi_m&1QgIFn?&G2z&t0Qh~zM^)y_aoQ>oJt+NAN3wm7zEncnA?RW+@gi9`&v
zUrW|_xlcu8(yk%KsFlTZGO-{UHA*@usd!RlDIKDWn$<+|x~PzkgXXC{v1Hiims5&5
zzbL0x=EZBPvI|Rmn3PcrH&Kpvd~*K7^LLszU(fQLI^Vg+M|b(?R?`o|S^k2~U)bYE
zclps@7P9=L&QCsy>HO3lKfBA%X8AdtpW9*Qo)TNXS_U#6ya>?-9gZ3-F{%(}gF)Ge
zr~SHfNl8%`QY+~}*^e15n3O1nn<$U0PWk|HHfP?B>g;(ZX6INg&s2$JH@>uPjrE-h
zNAWLaSd*!RL~=Pbtf=d@a3Y<)A+4{kg+W|hcM%LPCKGBhwInSNp<$hvnY}VU_S(p_
zOg^y&KQ?#y^8Com)KGj{`^^%~$Rv&ed_&9l^NkEkN|u(SYnAa7VkkfdK5-C;p9E5Z
zT!V)M;=qCUaUgX#kV<he5O2BAT_xAglzjJ;s$S-o*ewU=pNmcVqIPXi#?Ktd)-vFp
zs8iI0tSUDoby;pD-d5D*AP!OsWl~FU-qZFxgMuA<f#_}^x)Yno2I6`kjw`*x`fjaa
zDE=R<<{5?rR0i3-{T=rcV+j%41KX+k52(IEPf&(Md<$1!36&DcrW5M&i{1E2>$DG1
z?(M7gWhzp<EjM6=&#p?UxbotwKWdC)oN{ZI9C4~o`^=H5DRlcb>%2ns4-uz^F&K<=
zO_eW_EqMa+7=dvD69gs+*a=K&AG;z)3(Y`UuGq%hxs?=LPl|)`b<88rOp&$UU0WHJ
zqTZnLr~<ii+dk&pIr8`AxI;P4d&_=%?Y8{s+GfjxH?zK&?u%u)KAr2U6t!;ASzo{I
z>(6onIyaEF)p{+3ckmZ^D}NKXY0G=d{q&fd59YW)jysm)oVVzYthc-G$XTvU=i17Q
z-c47QYuCB<5@W}8`~l|l=v)uh-b}RnX{_B(wEO8D)R=E97xuBMWBXtC6PhJ?_z%5n
B=3xK;

delta 1414
zcmZuwO=ufO6rSB3$&xHtT1$!*JCbe5iLKbOB-cNQqc}}s=jT#W5-7~Ym^?*VSB}K)
zmZpYcA6#l^4~4y$*3dSGv}tH*QOKq3y%Y)(_@M5g7<wrb%7%m<eCnIEmEw(O_kC~Q
z+xKR^{bu&B$-grrUj+g_g5$GCgDbyA2>Fu-?P0&c;Q7DwhmkI!0G%Q!N-OO&0Y3yD
ziiA8yI~XO2bwSrAd9}{?PK>Vyo%MIcdGZijAGaqUEC``ZQVbrGmstp8CPO#tMhlk+
zgdYejf<A&i3Q=|fPOu*6!Hf(s#FGyMMS$KNS`t_c`eN)PoPxN6Tmk}|oYa5l2M+xp
z_-xWiNFDu17=qI{?U|hpMPR)!3?mo~L)yl(HjXMniLyQzW2Yd);z&Dz)(_)spy-9{
zS|=fF5OVmTUdZzZ{luYvjr+S&TL5TF!;%i-lQ4CZ7)v=Srorc^7{ZFvj;a|rXLQl{
z)EP(qymPnMu%luYrJAGt!Ubc4UKG;C6KTNsgJz7MY3TeMTym^E3a`I%GA<WKk5+v#
zW;8n@B3v<6T>XQY;#pOMt1J!kY#bI?7InI2tCs`m7D->Pf8+W<NUeGE6EovEyz-{E
zQoXZWDOWY!^xjy!b$jXBoAYm&#Q4pd>w830KgyXFO>sPDx~r;EQtoN|^bQyW&(z|+
zuTW7m{Z4hYHm8O#9Y@o02phyAu9)~gw1QE~O?)BCi|H2iS<;c$&#{LXPkryLuXU7l
zy*8W8?tA!yhEFQ~Xe2F|K22X%b?se6FQ-K{fJu{b;s=Zd)F5VT8aAXb(rzGdE)wU`
zhCPqpl1L)?`O>FLjm&&AzOWl#Xwbz5jc&zt#Dn{nNlR+C*v+b3|Ecpw$(`Wqr0eeo
zKNKcxeFW28ypKX?FKN}5_44twwvB1|vLM&*%Vi;d*zMAERjIvfR`lZP@y*{F!SHoK
zHr@)~6!ONG;c7h^xh+ghb3!u+rlj1{)pI<Y<#2&Rfx|@(mk>;sR;wtwdezv8W>cJi
zDs$lC?RyHVRd}aToKq_p3TPTN{)v9S?k28Kiw0XXuyJMc=GNQW6HS`fr3tHp%Hl@A
z^0#+$&m(V%AA3I;-Bz2P<gO>#I!H9ShrjM_dd7A=W0p(mb=&*@jGvJg92z8I`P*Xe
Xg@&*uCO+dk_JTwGqn_VI%6a|=?7A!Q

diff --git a/config/settings.py b/config/settings.py
index 1e5f14d..3214c3a 100644
--- a/config/settings.py
+++ b/config/settings.py
@@ -20,21 +20,34 @@ load_dotenv(BASE_DIR.parent / ".env")
 SECRET_KEY = os.getenv("DJANGO_SECRET_KEY", "change-me")
 DEBUG = os.getenv("DJANGO_DEBUG", "true").lower() == "true"
 
+def _host_from_env(value):
+    return value.replace("https://", "").replace("http://", "").split("/")[0].strip()
+
+
 ALLOWED_HOSTS = [
-    "127.0.0.1",
-    "localhost",
-    os.getenv("HOST_FQDN", ""),
+    host for host in [
+        "127.0.0.1",
+        "localhost",
+        ".appwizzy.dev",
+        ".dev.flatlogic.app",
+        _host_from_env(os.getenv("HOST_FQDN", "")),
+        _host_from_env(os.getenv("FULL_DOMAIN", "")),
+    ] if host
 ]
 
 CSRF_TRUSTED_ORIGINS = [
     origin for origin in [
+        "https://*.appwizzy.dev",
+        "http://*.appwizzy.dev",
+        "https://*.dev.flatlogic.app",
         os.getenv("HOST_FQDN", ""),
+        os.getenv("FULL_DOMAIN", ""),
         os.getenv("CSRF_TRUSTED_ORIGIN", "")
     ] if origin
 ]
 CSRF_TRUSTED_ORIGINS = [
-    f"https://{host}" if not host.startswith(("http://", "https://")) else host
-    for host in CSRF_TRUSTED_ORIGINS
+    f"https://{origin}" if not origin.startswith(("http://", "https://")) else origin
+    for origin in CSRF_TRUSTED_ORIGINS
 ]
 
 # Cookies must always be HTTPS-only; SameSite=Lax keeps CSRF working behind the proxy.