Django: Production Checklist

# settings.py
DEBUG = False
SECRET_KEY = os.environ['SECRET_KEY']  # from environment variable
ALLOWED_HOSTS = ['yourdomain.com']

# HTTPS
SECURE_SSL_REDIRECT = True
SESSION_COOKIE_SECURE = True
CSRF_COOKIE_SECURE = True
SECURE_HSTS_SECONDS = 31536000
SECURE_HSTS_INCLUDE_SUBDOMAINS = True

# Clickjacking protection
X_FRAME_OPTIONS = 'DENY'

DATABASES = {
    'default': dj_database_url.config(conn_max_age=600)
}

pip install whitenoise

MIDDLEWARE = ['whitenoise.middleware.WhiteNoiseMiddleware', ...]
STATIC_ROOT = BASE_DIR / 'staticfiles'
STATICFILES_STORAGE = 'whitenoise.storage.CompressedManifestStaticFilesStorage'

python manage.py collectstatic --no-input

LOGGING = {
    'version': 1,
    'handlers': {
        'console': {'class': 'logging.StreamHandler'},
    },
    'root': {'handlers': ['console'], 'level': 'WARNING'},
}

pip install django-storages boto3

pip install sentry-sdk

import sentry_sdk
sentry_sdk.init(dsn=os.environ['SENTRY_DSN'])

python manage.py check --deploy