diff --git a/roles/app/files/vagrant.py b/roles/app/files/vagrant.py
new file mode 100644
index 0000000..47b4090
--- /dev/null
+++ b/roles/app/files/vagrant.py
@@ -0,0 +1,5 @@
+from .prod import *
+
+# Required in Vagrant since Django 4
+# (see https://docs.djangoproject.com/en/5.0/releases/4.0/#csrf-trusted-origins-changes-4-0)
+CSRF_TRUSTED_ORIGINS = ["http://127.0.0.1:8080", "http://localhost:8080"]
diff --git a/roles/app/tasks/main.yml b/roles/app/tasks/main.yml
index 8ee99a8..dcae183 100644
--- a/roles/app/tasks/main.yml
+++ b/roles/app/tasks/main.yml
@@ -163,6 +163,15 @@
   tags:
     - bootstrap
 
+- name: install Vagrant settings
+  ansible.builtin.copy:
+    src: vagrant.py
+    dest: "{{ appdir }}/zds/settings/vagrant.py"
+    mode: u=rw,g=r,o=r
+  when: env == "vagrant"
+  tags:
+    - bootstrap
+
 # Installation of backend, frontend and zmd dependencies
 
 - name: update pip in virtualenv  # some dependencies (like rust ones) require a recent pip