Merge pull request #1 from digorgonzola/allow_cidr_nets

allowed_hosts: support CIDR notation

.github/workflows/release.yml

@@ -6,7 +6,7 @@ on:
         - published
 
 env:
-  AWS_REGION: ap-northeast-1
+  AWS_REGION: ap-southeast-2
   TAG: ${{ github.event.release.tag_name }}
 
 permissions:

.github/workflows/test.yml

@@ -6,7 +6,7 @@ on:
       - "main"
 
 env:
-  AWS_REGION: ap-northeast-1
+  AWS_REGION: ap-southeast-2
   TAG_PREFIX: test
 
 permissions:

app/app/settings.py

@@ -33,6 +33,13 @@
     )
 )
 
+ALLOWED_CIDR_NETS = []
+ALLOWED_CIDR_NETS.extend(
+    filter(
+        None,
+        os.environ.get('ALLOWED_CIDR_NETS', '').split(',')
+    )
+)
 
 # Application definition
 
@@ -51,6 +58,7 @@
 ]
 
 MIDDLEWARE = [
+    'allow_cidr.middleware.AllowCIDRMiddleware',
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',

docker-compose-proxy.yml

@@ -12,7 +12,8 @@ services:
       - DB_NAME=app
       - DB_USER=postgres
       - DB_PASS=supersecretpassword
-      - ALLOWED_HOSTS=127.0.0.1,localhost
+      - ALLOWED_HOSTS=*
+      - ALLOWED_CIDR_NETS=127.0.0.0/8
     depends_on:
       - db
 

requirements.txt

@@ -1,5 +1,6 @@
 Django>=2.1.3,<2.2.0
 djangorestframework>=3.9.0,<3.10.0
+django-allow-cidr>=0.3.1,<0.4.0
 psycopg2>=2.7.5,<2.8.0
 Pillow>=5.3.0,<5.4.0
 uwsgi>=2.0.18,<2.1.0