app.json

{
  "name": "Mozilla Foundation site",
  "description": "Mozilla Foundation site",
  "addons": [
    "heroku-postgresql:hobby-dev"
  ],
  "formation": {
    "web": {
      "quantity": 1
    }
  },
  "env": {
    "DJANGO_SECRET_KEY": {
      "generator": "secret"
    },
    "DEBUG": "False",
    "CORS_ALLOWED_ORIGINS": "*",
    "XSS_PROTECTION": "True",
    "CONTENT_TYPE_NO_SNIFF": "True",
    "SET_HSTS": "True",
    "SSL_REDIRECT": "True",
    "X_FRAME_OPTIONS": "DENY",
    "USE_S3": "True",
    "PULSE_API_DOMAIN": "https://network-pulse-api-production.herokuapp.com",
    "PULSE_DOMAIN": "https://www.mozillapulse.org",
    "CSP_CHILD_SRC": "'self' https://www.youtube.com https://www.youtube-nocookie.com",
    "CSP_CONNECT_SRC": "*",
    "CSP_DEFAULT_SRC": "'none'",
    "CSP_FRAME_ANCESTORS": "'none'",
    "CSP_FRAME_SRC": "'self' https://js.tito.io",
    "CSP_FONT_SRC": "'self' https://fonts.gstatic.com https://fonts.googleapis.com https://code.cdn.mozilla.net",
    "CSP_IMG_SRC": "* data:",
    "CSP_MEDIA_SRC": "'self' https://s3.amazonaws.com/mofo-assets/foundation/video/",
    "CSP_SCRIPT_SRC": "'self' 'unsafe-inline' https://www.google-analytics.com/analytics.js http://*.shpg.org/ https://comments.mozillafoundation.org/ https://airtable.com https://platform.twitter.com https://cdn.syndication.twimg.com https://js.tito.io",
    "CSP_STYLE_SRC": "'self' 'unsafe-inline' https://code.cdn.mozilla.net https://fonts.googleapis.com  https://platform.twitter.com https://js.tito.io",
    "NPM_CONFIG_PRODUCTION": "true",
    "REVIEW_APP": "True",
    "XROBOTSTAG_ENABLED": "True"
  },
  "buildpacks": [
    {
      "url": "heroku/nodejs"
    },
    {
      "url": "heroku/python"
    }
  ],
  "scripts": {
    "postdeploy": "python network-api/manage.py load_fake_data && python network-api/manage.py review_app_setup create && python network-api/manage.py review_app_admin && python network-api/manage.py sync_locale_trees",
    "pr-predestroy": "python network-api/manage.py review_app_setup teardown"
  }
}