CSRF in header
CSRF header is needed for a POST request in the Django REST framework.
@@ -7,6 +7,7 @@ www.{% raw %}{$DOMAIN_NAME}{% endraw %} {
header_upstream Host {host}
header_upstream X-Real-IP {remote}
header_upstream X-Forwarded-Proto {scheme}
+ header_upstream X-CSRFToken {~csrftoken}
}
log stdout
errors stdout
