Try It Yourself - SyntaxStudy Editor

HTML / CSS / JS

# mysite/settings/production.py — production settings
import os
from pathlib import Path

BASE_DIR = Path(__file__).resolve().parent.parent.parent

# Load sensitive values from environment
SECRET_KEY = os.environ['DJANGO_SECRET_KEY']
DEBUG      = False

ALLOWED_HOSTS = os.environ.get('ALLOWED_HOSTS', '').split(',')

# Database — PostgreSQL in production
DATABASES = {
    'default': {
        'ENGINE':   'django.db.backends.postgresql',
        'NAME':     os.environ['DB_NAME'],
        'USER':     os.environ['DB_USER'],
        'PASSWORD': os.environ['DB_PASSWORD'],
        'HOST':     os.environ.get('DB_HOST', 'localhost'),
        'PORT':     os.environ.get('DB_PORT', '5432'),
    }
}

# HTTPS security headers
SECURE_SSL_REDIRECT         = True
SESSION_COOKIE_SECURE       = True
CSRF_COOKIE_SECURE          = True
SECURE_HSTS_SECONDS         = 31536000
SECURE_HSTS_INCLUDE_SUBDOMAINS = True
SECURE_HSTS_PRELOAD         = True
SECURE_BROWSER_XSS_FILTER   = True
X_FRAME_OPTIONS             = 'DENY'

# Static and media files
STATIC_ROOT = BASE_DIR / 'staticfiles'
STATIC_URL  = '/static/'
MEDIA_ROOT  = BASE_DIR / 'media'
MEDIA_URL   = '/media/'

# Caching — Redis in production
CACHES = {
    'default': {
        'BACKEND': 'django.core.cache.backends.redis.RedisCache',
        'LOCATION': os.environ.get('REDIS_URL', 'redis://127.0.0.1:6379/1'),
    }
}