secret fix

Author: v-geberr

.env.example

@@ -20,6 +20,9 @@
 # RUNNING_IN_PRODUCTION=1
 
 # Locally set this to a random string
-# Remotely set this with the following command:
+# LOCAL_SECRET_KEY=123abc
+
+# Production secret key
+# Create value with the following command:
 # python -c 'import secrets; print(secrets.token_hex())'
-# SECRET_KEY=<secret key>
+# AZURE_SECRET_KEY=<secret key>

azureproject/development.py

@@ -4,6 +4,8 @@
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True
 
+SECRET_KEY = os.getenv('LOCAL_SECRET_KEY')
+
 # Don't use Whitenoise to avoid having to run collectstatic first.
 STATICFILES_STORAGE = 'django.contrib.staticfiles.storage.StaticFilesStorage'
 

azureproject/production.py

@@ -7,6 +7,11 @@
 DEBUG = False
 DEBUG_PROPAGATE_EXCEPTIONS = True
 
+# SECURITY WARNING: keep the secret key used in production secret!
+# Use this py command to create secret 
+# python -c 'import secrets; print(secrets.token_hex())'
+SECRET_KEY = os.getenv('AZURE_SECRET_KEY')
+
 STATICFILES_STORAGE = 'whitenoise.storage.CompressedStaticFilesStorage'
 
 # Configure database connection for Azure PostgreSQL Flexible server instance.