Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

"Secure your website" extension, covering eg keeping SECRET_KEY secure, etc #101

Open
3 tasks
hjwp opened this issue Feb 12, 2018 · 0 comments
Open
3 tasks

"Secure your website" extension, covering eg keeping SECRET_KEY secure, etc #101

hjwp opened this issue Feb 12, 2018 · 0 comments

Comments

@hjwp
Copy link
Contributor

hjwp commented Feb 12, 2018 •
edited
Loading

This could be an addition to https://github.com/DjangoGirls/tutorial-extensions/tree/master/en/authentication_authorization or it could be its own extension.

Should capture some of the points raised in DjangoGirls/tutorial#1192 and DjangoGirls/tutorial#802

  • use an environment variable (or similar) for SECRET_KEY
  • switch DEBUG to False
  • set ALLOWED_HOSTS correctly
@hjwp hjwp changed the title "Secure your website" tips, eg keeping SECRET_KEY secure, etc "Secure your website" extension, covering eg keeping SECRET_KEY secure, etc Feb 12, 2018
This was referenced Feb 12, 2018
Closed
Merged
@hjwp hjwp mentioned this issue Mar 15, 2018
Closed
pzrq added a commit to pzrq/djangogirls-tutorial-blog that referenced this issue Oct 7, 2019
@pzrq
🔓🙈 Publish a SECRET_KEY
c1bbcd0 
I fold (for now at least).

Supporting secure out of the box would be nice, but I can also see it's close to the too-hard basket for people who're just volunteering and not renumerated (it is the kind of thing that becomes an issue as soon as one goes past the just trying it out stage though):
https://help.pythonanywhere.com/pages/environment-variables-for-web-apps
https://stackoverflow.com/questions/15170637/effects-of-changing-djangos-secret-key/15383766
DjangoGirls/tutorial-extensions#101
@das-g das-g mentioned this issue Mar 25, 2021
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@hjwp