diff --git a/.gitignore b/.gitignore
index 0752166..a81b6ff 100644
--- a/.gitignore
+++ b/.gitignore
@@ -10,3 +10,9 @@ media/
 dist/
 build/
 .DS_Store
+
+# Runtime state and stray local backups — never part of the source tree
+celerybeat-schedule
+*.bak*
+*.orig
+*.rej
diff --git a/docker-compose.yml b/docker-compose.yml
index 1e2744a..da7cb23 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -55,7 +55,7 @@ services:
       DB_HOST: ixg-postgres
       DB_PORT: 5432
     ports:
-      - "0.0.0.0:8000:8000"
+      - "127.0.0.1:8000:8000"
 
   celery_worker:
     build: .
diff --git a/dsp_platform/settings.py b/dsp_platform/settings.py
index aa8359d..4289b69 100644
--- a/dsp_platform/settings.py
+++ b/dsp_platform/settings.py
@@ -17,6 +17,22 @@ SECRET_KEY = env("DJANGO_SECRET_KEY", default="insecure-dev-key-change-in-produc
 DEBUG = env.bool("DJANGO_DEBUG", default=False)
 ALLOWED_HOSTS = env.list("DJANGO_ALLOWED_HOSTS", default=["194.164.95.50", "localhost", "127.0.0.1"])
 
+# Trust nginx TLS termination headers
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
+USE_X_FORWARDED_HOST = True
+SESSION_COOKIE_SECURE = env.bool("SESSION_COOKIE_SECURE", default=True)
+CSRF_COOKIE_SECURE = env.bool("CSRF_COOKIE_SECURE", default=True)
+CSRF_TRUSTED_ORIGINS = env.list(
+    "DJANGO_CSRF_TRUSTED_ORIGINS",
+    default=[
+        "https://ixgltd.com",
+        "https://www.ixgltd.com",
+        "https://app.ixgltd.com",
+        "https://portal.ixgltd.com",
+        "https://auth.ixgltd.com",
+    ],
+)
+
 INSTALLED_APPS = [
     "grappelli",
     "django.contrib.admin",
diff --git a/scripts/entrypoint.sh b/scripts/entrypoint.sh
index c7807af..5b497c0 100755
--- a/scripts/entrypoint.sh
+++ b/scripts/entrypoint.sh
@@ -13,6 +13,11 @@ python manage.py migrate --noinput || true
 echo "Collecting static files..."
 python manage.py collectstatic --noinput
 
+if [ "$#" -gt 0 ]; then
+    echo "Executing command: $*"
+    exec "$@"
+fi
+
 echo "Starting Gunicorn..."
 exec gunicorn --bind 0.0.0.0:8000 \
     --workers 2 \