Keep secret key private in prod

mwmbl/settings_common.py

@@ -19,9 +19,6 @@ BASE_DIR = Path(__file__).resolve().parent.parent
 # Quick-start development settings - unsuitable for production
 # See https://docs.djangoproject.com/en/4.2/howto/deployment/checklist/
 
-# SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = 'django-insecure-qqr#f(i3uf%m8%8u35vn=ov-uk(*8!a&1t-hxa%ev2^t1%j&sm'
-
 
 # Application definition
 

mwmbl/settings_dev.py

@@ -1,6 +1,10 @@
 from mwmbl.settings_common import *
 
 
+# SECURITY WARNING: keep the secret key used in production secret!
+SECRET_KEY = 'django-insecure-qqr#f(i3uf%m8%8u35vn=ov-uk(*8!a&1t-hxa%ev2^t1%j&sm'
+
+
 DATABASES = {
     'default': {
         'ENGINE': 'django.db.backends.sqlite3',

mwmbl/settings_prod.py

@@ -5,6 +5,9 @@ import dj_database_url
 from mwmbl.settings_common import *
 
 
+SECRET_KEY = os.environ["DJANGO_SECRET_KEY"]
+
+
 DATABASES = {'default': dj_database_url.config(default=os.environ["DATABASE_URL"])}
 
 DEBUG = False