PyCS/backend/pycs_backend/settings/security.py

import os

from django.core.management.utils import get_random_secret_key
from pathlib import Path
from .base import BASE_DIR

SECRET_KEY_FILE = Path(os.environ.get("PYCS_SECRET_KEYFILE", BASE_DIR / 'secret.txt'))

if not SECRET_KEY_FILE.exists():
    with open(SECRET_KEY_FILE, "w") as f:
        f.write(get_random_secret_key())

    os.chmod(SECRET_KEY_FILE, 0o600)

SECRET_KEY = open(SECRET_KEY_FILE).read()


# Quick-start development settings - unsuitable for production
# See https://docs.djangoproject.com/en/3.2/howto/deployment/checklist/

ALLOWED_HOSTS = [
    "https://ammod.inf-cv.uni-jena.de",
    "https://deimos.inf-cv.uni-jena.de",
    "http://localhost:5000",
    "http://localhost:8080",
    "localhost",
]


# Password validation
# https://docs.djangoproject.com/en/3.2/ref/settings/#auth-password-validators

AUTH_PASSWORD_VALIDATORS = [
    {
        'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
    },
]