Re: Suggestion: "django-admin startproject" should not put secrets in settings.py

2020-07-27 Thread Jure Erznožnik
+1 on this approach. No problems with external storage mechanisms where the newbie then needs to do something to provide the required data. It's all done neatly in Python, but secrets themselves are conveniently placed in a different file. LP, Jure On 26/07/2020 15:09, Roy Smith wrote: In th

Re: Suggestion: "django-admin startproject" should not put secrets in settings.py

2020-07-26 Thread Tom Carrick
Hi Roy, There's also a more recent thread on this: https://groups.google.com/u/2/g/django-developers/c/CIPgeTetYpk Tom On Sun, 26 Jul 2020 at 18:00, Roy Smith wrote: > In the past, I've worked on a couple of django projects where we violated > the: > > # SECURITY WARNING: keep the secret key u

Suggestion: "django-admin startproject" should not put secrets in settings.py

2020-07-26 Thread Roy Smith
In the past, I've worked on a couple of django projects where we violated the: > # SECURITY WARNING: keep the secret key used in production secret!" advice because on day one, somebody didn't know what we they were doing and never fixed it. Looking around at a collection of django projects (by