What is the reason for 0.0.0.0 in ALLOWED_HOSTS?

[NewJorg]

does anyone know what the reason is for the 0.0.0.0 in the ALLOWED_HOSTS in the local.py?

cookiecutter-django/{{cookiecutter.project_slug}}/config/settings/local.py

Lines 13 to 14 in 9c74f20

	# https://docs.djangoproject.com/en/dev/ref/settings/#allowed-hosts
	ALLOWED_HOSTS = ["localhost", "0.0.0.0", "127.0.0.1"]

For me it feels a bit like it does not have any effect. Maybe it was meant to allow all, but then it should be * according the the linked documentation.

I hope somebody knows about the intention of the value or knows what it does that I do not see.

[luzfcb]

0.0.0.0 configure Django to accept requests that coming from outside your operating system, like other computer in your network. https://stackoverflow.com/a/61096774 Em sex, 10 de dez de 2021 13:29, NewJorg ***@***.***> escreveu:

…

does anyone know what the reason is for the 0.0.0.0 in the ALLOWED_HOSTS in the local.py? https://github.com/cookiecutter/cookiecutter-django/blob/9c74f2076c76fbba7bc5fe9d7722c5f2129f64ea/%7B%7Bcookiecutter.project_slug%7D%7D/config/settings/local.py#L13-L14 For me it feels a bit like it does not have any effect. Maybe it was meant to allow all, but then it should be * according the the linked documentation. I hope somebody knows about the intention of the value or knows what it does that I do not see. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#3460>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAGFFL7T4SZTTS7PNB4ADBDUQITHXANCNFSM5JZQ6N2A> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

[NewJorg]

but it said to me "DISALLOWED HOST" with 0.0.0.0 in it. By replacing it with * in the ALLOWED_HOSTS it work like intended.
See next answer in stackoverflow

The 0.0.0.0:8000 after runserver is a bind address to a socket that should listen to all ip addresses. That I already knew and it was the reason why I could imagine that it should allow all hosts.

The ALLOWED_HOSTS filters based on the HTTP Host header (so after the connection to the socket was established successfully)

But when the intention was to allow all hosts, then I should be able to make it working like intended :-)