Added security settings to default configuration.

see #1592

doc/upgrade.rst

@@ -110,6 +110,13 @@ Add ``'modoboa.dnstools'`` to ``MODOBOA_APPS``:
       'modoboa.dnstools',
    )
 
+Add the following new settings:
+
+.. sourcecode:: python
+
+   CSRF_COOKIE_SECURE = True
+   SESSION_COOKIE_SECURE = True
+
 modoboa-postfix-autoreply 1.5.0
 ===============================
 

modoboa/core/commands/templates/settings.py.tpl

@@ -50,6 +50,8 @@ SITE_ID = 1
 # Security settings
 
 X_FRAME_OPTIONS = "SAMEORIGIN"
+CSRF_COOKIE_SECURE = True
+SESSION_COOKIE_SECURE = True
 
 # Application definition