diff --git a/etebase_server/settings.py b/etebase_server/settings.py
index 887ec4e..f6c726d 100644
--- a/etebase_server/settings.py
+++ b/etebase_server/settings.py
@@ -164,6 +164,8 @@ if any(os.path.isfile(x) for x in config_locations):
 
     if "allowed_hosts" in config:
         ALLOWED_HOSTS = [y for x, y in config.items("allowed_hosts")]
+        CSRF_TRUSTED_ORIGINS = ["https://" + y for x, y in config.items("allowed_hosts")] + \
+                               ["http://" + y for x, y in config.items("allowed_hosts")]
 
     if "database" in config:
         DATABASES = {"default": {x.upper(): y for x, y in config.items("database")}}