diff --git a/musik/settings.py b/musik/settings.py
index 61c9c8f..0471604 100644
--- a/musik/settings.py
+++ b/musik/settings.py
@@ -24,10 +24,11 @@ BASE_DIR = Path(__file__).resolve().parent.parent
 SECRET_KEY = "django-insecure-&z*xu$^w8btr(%1!y#+0a98)l_q*+*6z54611pi678mdpsar_="
 
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = True
+DEBUG = "DEBUG" in os.environ
 
-ALLOWED_HOSTS = []
-CSRF_TRUSTED_ORIGINS = ["https://localhost"]
+HOST = os.getenv("MUSIK_HOST", "localhost")
+ALLOWED_HOSTS = [HOST]
+CSRF_TRUSTED_ORIGINS = [f"https://{HOST}"]
 
 
 # Application definition