diff --git a/.env.prod b/.env.prod
index 26f17ca..ea29481 100644
--- a/.env.prod
+++ b/.env.prod
@@ -1,6 +1,6 @@
 DJANGO_ALLOWED_HOSTS=127.0.0.1,imamjavad.nwhco.ir,www.imamjavad.nwhco.ir,*.nwhco.ir,188.40.92.124,88.99.212.243,dovodi.newhorizonco.uk,*.newhorizonco.uk,0.0.0.0,imamjavad.newhorizonco.uk
 DJANGO_SETTINGS_MODULE=config.settings.production
-
+DJANGO_TRUSTED_ORIGINS="http://127.0.0.1:8000","http://127.0.0.1:8001","https://127.0.0.1:8000","https://127.0.0.1:8001","http://imamjavad.nwhco.ir","https://imamjavad.nwhco.ir","http://www.imamjavad.nwhco.ir","https://www.imamjavad.nwhco.ir","http://*.nwhco.ir","https://*.nwhco.ir","http://188.40.92.124","https://188.40.92.124","http://88.99.212.243","https://88.99.212.243","http://dovodi.newhorizonco.uk","https://dovodi.newhorizonco.uk","http://*.newhorizonco.uk","https://*.newhorizonco.uk","http://0.0.0.0","https://0.0.0.0","http://imamjavad.newhorizonco.uk","https://imamjavad.newhorizonco.uk",
 
 #[database.POSTGRES]
 POSTGRES_USER="pg-user"
diff --git a/config/settings/base.py b/config/settings/base.py
index c2cc765..ba07263 100644
--- a/config/settings/base.py
+++ b/config/settings/base.py
@@ -27,6 +27,7 @@ BASE_DIR = Path(__file__).resolve().parent.parent.parent
 environ.Env.read_env(os.path.join(BASE_DIR, '.env'))
 
 ALLOWED_HOSTS = env('DJANGO_ALLOWED_HOSTS').split(',')
+CSRF_TRUSTED_ORIGINS = env('DJANGO_TRUSTED_ORIGINS').split(',')
 
 
 # Quick-start development settings - unsuitable for production
@@ -983,9 +984,3 @@ PLAUSIBLE_DOMAIN = env("PLAUSIBLE_DOMAIN")
 #     },
 # }
 
-
-CSRF_TRUSTED_ORIGINS = [
-    "https://imamjavad.nwhco.ir",
-    "https://dovodi.newhorizonco.uk",
-    "https://dovoodi.newhorizonco.uk",
-]
\ No newline at end of file