"Secure your website" extension, covering eg keeping SECRET_KEY secure, etc - Githubissues

DjangoGirls / tutorial-extensions

Additional tasks for tutorial

https://tutorial-extensions.djangogirls.org

Other

162 stars 202 forks source link

"Secure your website" extension, covering eg keeping SECRET_KEY secure, etc #101

Open hjwp opened 6 years ago

hjwp commented 6 years ago

This could be an addition to https://github.com/DjangoGirls/tutorial-extensions/tree/master/en/authentication_authorization or it could be its own extension.

Should capture some of the points raised in https://github.com/DjangoGirls/tutorial/issues/1192 and https://github.com/DjangoGirls/tutorial/issues/802

[ ] use an environment variable (or similar) for SECRET_KEY
[ ] switch DEBUG to False
[ ] set ALLOWED_HOSTS correctly