以下内容是否足以保护我的 heroku 部署的密钥和数据库密码？

Question

I have added the environment variables through to get secret key database name and password. Now anything else to make it more secure.Let me know.

Used "Advance system settings" and under that added environment variables in "User variables". Also this is going to be my first deployment on 'heroku' that's why following a tutorial.

SECRET_KEY = os.environ['DB_SECRET']

databases

DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.postgresql',
        'NAME': 'portfoliodb',
        'USER': os.environ.get('DB_USER'),
        'PASSWORD': os.environ.get('DB_PASS'),
        'HOST': 'localhost',
        'PORT': '5432',
    }
}

Answer 1

Heroku has a package that handles that for you. More info here . Essentially, it overrides default with secure credentials automatically generated in the Heroku platform.

Add the following import statement to the top of settings.py:

import django_heroku

Then add the following to the bottom of settings.py:

Activate Django-Heroku.

django_heroku.settings(locals())