diff --git a/.env.dist b/.env.dist
index 962d763d8..d36c0f4ea 100644
--- a/.env.dist
+++ b/.env.dist
@@ -6,6 +6,7 @@ SECRET_KEY=django-insecure-j8op9)1q8$1&0^s&p*_0%d#pr@w9qj@1o=3#@d=a(^@9@zd@%j
 
 # Don't use "*" for ALLOWED_HOSTS in production
 ALLOWED_HOSTS=www.example.com,example.com,*
+CSRF_TRUSTED_ORIGINS=example.com,*
 
 # Database URL