updated .env

.env.example

@@ -1,39 +1,39 @@
 # --- Application Security ---
-# Set to a long, random string in production
-SECRET_KEY=django-insecure-replace-this-in-production
+# Set to a long, random string in production (e.g. 50+ chars)
+SECRET_KEY="django-insecure-replace-this-in-production"
 
 # Set to "false" in production for security and performance
 DEBUG=true
 
-# Custom URL for the Django Admin interface (e.g., secret-admin/)
-ADMIN_URL=admin/
+# Custom URL for the Django Admin interface (e.g., my-secret-admin/)
+ADMIN_URL="admin"
 
 # --- Hosting & Networking ---
 # The primary domain where your app is hosted (e.g., holy.narl.io)
-# Comma-separated list for backend to allow requests
-ALLOWED_HOSTS=localhost,127.0.0.1,backend
+ALLOWED_HOSTS=localhost,127.0.0.1,backend,holy.narl.io
 
-# CSRF protection: Comma-separated list of trusted origins (must start with http:// or https://)
-CSRF_TRUSTED_ORIGINS=http://localhost:5173
+# CSRF protection: Comma-separated list of trusted origins (MUST start with https:// in production)
+CSRF_TRUSTED_ORIGINS=https://holy.narl.io
 
-# CORS protection: Comma-separated list of allowed origins (must match your frontend domain)
-CORS_ALLOWED_ORIGINS=http://localhost:5173,http://127.0.0.1:5173
+# CORS protection: Comma-separated list of allowed origins
+CORS_ALLOWED_ORIGINS=https://holy.narl.io
 
 # --- SMTP Configuration (Required for Email Verification) ---
 # For development, if EMAIL_HOST is empty, emails are printed to the console.
 EMAIL_HOST=smtp.gmail.com
-EMAIL_PORT=587
-EMAIL_USE_TLS=true
-EMAIL_HOST_USER=your-email@gmail.com
-EMAIL_HOST_PASSWORD=your-app-specific-password
+EMAIL_PORT=465
+EMAIL_USE_SSL=true
+EMAIL_HOST_USER="your-email@gmail.com"
+EMAIL_HOST_PASSWORD="your-app-specific-password"
 
 # --- Frontend Configuration ---
-# The base URL of the backend API (e.g., https://holy.narl.io/api/)
-VITE_API_URL=http://localhost:8000/api/
-VITE_ALLOWED_HOSTS=localhost
+# The base URL of the backend API (MUST end with /api/)
+VITE_API_URL=https://holy.narl.io/api/
+VITE_ALLOWED_HOSTS=localhost,holy.narl.io
 
-# --- Impressum / Contact Details (Legal) ---
-VITE_IMPRESSUM_NAME="Your Name or Project Name"
-VITE_IMPRESSUM_STREET="Your Street Address"
+# --- Impressum / Contact Details (Required for German Law § 5 TMG) ---
+VITE_IMPRESSUM_NAME="Your First and Last Name"
+VITE_IMPRESSUM_STREET="Street Name and House Number"
 VITE_IMPRESSUM_CITY="Postal Code and City"
-VITE_IMPRESSUM_EMAIL="your-support@email.com"
+VITE_IMPRESSUM_EMAIL="your-public-contact@email.com"
+VITE_IMPRESSUM_PHONE="+49 123 456789"

backend/staticfiles/robots.txt

@@ -0,0 +1,19 @@
+User-agent: *
+Disallow: /admin/
+Disallow: /api/
+Disallow: /settings/
+Disallow: /dashboard/
+
+# Block AI scrapers specifically
+User-agent: GPTBot
+Disallow: /
+
+User-agent: CCBot
+Disallow: /
+
+# Allow Google Search to index the catalog
+User-agent: Googlebot
+Allow: /
+Allow: /flavor/
+Allow: /category/
+Allow: /profile/

docker-compose.yml

@@ -33,6 +33,7 @@ services:
         - VITE_IMPRESSUM_STREET=${VITE_IMPRESSUM_STREET}
         - VITE_IMPRESSUM_CITY=${VITE_IMPRESSUM_CITY}
         - VITE_IMPRESSUM_EMAIL=${VITE_IMPRESSUM_EMAIL}
+        - VITE_IMPRESSUM_PHONE=${VITE_IMPRESSUM_PHONE}
     container_name: holy-frontend
     restart: unless-stopped
     networks:

frontend/Dockerfile

@@ -11,12 +11,14 @@ ARG VITE_IMPRESSUM_NAME
 ARG VITE_IMPRESSUM_STREET
 ARG VITE_IMPRESSUM_CITY
 ARG VITE_IMPRESSUM_EMAIL
+ARG VITE_IMPRESSUM_PHONE
 
 ENV VITE_API_URL=${VITE_API_URL}
 ENV VITE_IMPRESSUM_NAME=${VITE_IMPRESSUM_NAME}
 ENV VITE_IMPRESSUM_STREET=${VITE_IMPRESSUM_STREET}
 ENV VITE_IMPRESSUM_CITY=${VITE_IMPRESSUM_CITY}
 ENV VITE_IMPRESSUM_EMAIL=${VITE_IMPRESSUM_EMAIL}
+ENV VITE_IMPRESSUM_PHONE=${VITE_IMPRESSUM_PHONE}
 
 RUN npm run build
 

frontend/src/pages/About.tsx

@@ -57,6 +57,9 @@ const About: React.FC = () => {
             <Typography variant="subtitle1" sx={{ fontWeight: 'bold' }}>Kontakt:</Typography>
             <Typography variant="body2">
                 E-Mail: {import.meta.env.VITE_IMPRESSUM_EMAIL || '[Your Support Email Address]'}<br />
+                {import.meta.env.VITE_IMPRESSUM_PHONE && (
+                    <>Telefon: {import.meta.env.VITE_IMPRESSUM_PHONE}<br /></>
+                )}
                 Internet: holy.narl.io
             </Typography>
         </Box>