{% extends 'workflows/base_shell.html' %}
{% load static i18n %}

{% block title %}{% trans "Host & Domain Setup" %}{% endblock %}

{% block extra_css %}
<link rel="stylesheet" href="{% static 'workflows/css/docs_pages.css' %}" />
{% endblock %}

{% block shell_body %}
      {% include 'workflows/includes/app_header.html' with header_show_home=1 header_inside_shell=1 %}
    <div class="page-stack">
    <div class="top">
      <h1>{% trans "Host & Domain Setup" %}</h1>
      <div class="actions">
        <a class="btn btn-secondary" href="/admin-tools/handbook/">{% trans "Back to Handbook" %}</a>
      </div>
    </div>
    <p class="sub">{% trans "Reference for configuring hostnames and origins correctly in Django deployments, including how to fix Invalid HTTP_HOST errors." %}</p>

    <div class="box">
      <h2>{% trans "Why this error happens" %}</h2>
      <p>{% trans "Django rejects requests whose Host header is not present in ALLOWED_HOSTS. This validation runs before normal page routing, so a broken hostname cannot show a friendly in-app error page on that same host." %}</p>
      <p>{% trans "Use this guide from a working hostname or IP address to correct the environment configuration." %}</p>
    </div>

    <div class="box">
      <h2>{% trans "Recommended environment variables" %}</h2>
      <ul>
        <li><code>APP_DOMAIN</code>: {% trans "canonical hostname without scheme, for example" %} <code>workdock.bostame.de</code></li>
        <li><code>APP_BASE_URL</code>: {% trans "canonical external URL with scheme, for example" %} <code>https://workdock.bostame.de</code></li>
        <li><code>DJANGO_ALLOWED_HOSTS</code>: {% trans "comma-separated hostnames and IPs allowed to reach the app" %}</li>
        <li><code>DJANGO_CSRF_TRUSTED_ORIGINS</code>: {% trans "comma-separated origins with scheme for POST and CSRF-safe requests" %}</li>
      </ul>
      <p>{% trans "The application automatically adds APP_DOMAIN and the hostname from APP_BASE_URL to the effective host allow-list. APP_BASE_URL is also added to trusted CSRF origins." %}</p>
    </div>

    <div class="box">
      <h2>{% trans "Current test deployment example" %}</h2>
      <pre><code>APP_DOMAIN=workdock.bostame.de
APP_BASE_URL=https://workdock.bostame.de
DJANGO_ALLOWED_HOSTS=192.168.2.55,localhost,127.0.0.1
DJANGO_CSRF_TRUSTED_ORIGINS=http://192.168.2.55:8088,https://workdock.bostame.de</code></pre>
    </div>

    <div class="box">
      <h2>{% trans "Production example" %}</h2>
      <pre><code>APP_DOMAIN=workdock.example.com
APP_BASE_URL=https://workdock.example.com
DJANGO_ALLOWED_HOSTS=workdock.example.com
DJANGO_CSRF_TRUSTED_ORIGINS=https://workdock.example.com</code></pre>
      <p>{% trans "Production should run with HTTPS, DEBUG disabled, secure cookies enabled, and SSL redirect enabled." %}</p>
    </div>

    <div class="box">
      <h2>{% trans "How to fix a live server" %}</h2>
      <ol>
        <li>{% trans "Log into the server and edit the active env file, for example" %} <code>/opt/workdock/.env.test</code></li>
        <li>{% trans "Set APP_DOMAIN and APP_BASE_URL to the real external hostname." %}</li>
        <li>{% trans "Keep the local IP in DJANGO_ALLOWED_HOSTS if you still use direct IP access." %}</li>
        <li>{% trans "Restart the stack or rerun the deployment script." %}</li>
      </ol>
      <pre><code>cd /opt/workdock
nano .env.test
RUN_DJANGO_CHECK=0 DEPLOY_HEALTH_URL="http://127.0.0.1:8088/healthz/" ./scripts/deploy_stack.sh .env.test docker-compose.prod.yml</code></pre>
    </div>

    <div class="box">
      <h2>{% trans "Important rules" %}</h2>
      <ul>
        <li><code>DJANGO_ALLOWED_HOSTS</code>: {% trans "hostnames only, no scheme" %}</li>
        <li><code>DJANGO_CSRF_TRUSTED_ORIGINS</code>: {% trans "must include scheme, for example" %} <code>https://workdock.bostame.de</code></li>
        <li>{% trans "If you use both IP and domain access, keep both in the configuration." %}</li>
        <li>{% trans "A broken hostname setup cannot self-heal via the same broken host. Use a working host or IP to access this guide." %}</li>
      </ul>
    </div>
    </div>
{% endblock %}