SECRET_KEY

settings.py

from djangosecure import DjangoSecretKey


SECRET_KEY_FILE_PATH = '/some/path/to/store/file.secret'
secret_key = DjangoSecretKey(SECRET_KEY_FILE_PATH)
SECRET_KEY = secret_key.key

• Note: If the secret key file path does not exist it will try to create it. (write permissio required @SECRET_KEY_FILE_PATH origin)

• Note: The secret file will be automatically created the first time you call secret_key.key

• The cryptographic key is stored by default at ~/.private/django_secure.key you can change this by passing crypto_key_file= to the DjangoSecretKey constructor: secret_key = DjangoSecretKey(SECRET_KEY_FILE_PATH, crypto_key_file='path/to/your/cryptokey') DjangoDatabaseSettings and EncryptedStoredSettings accept crypto_key_file parameter too.

DATABASES

The first time you run python manage.py runserver you will be prompted for your database settings. They will be saved encrypted with the generated cryptokey generated by django-secure module.

You can have as many database configurations, change the parameter to change the configuration and running python manage.py runserver you will be prompted again for the new settings

from djangosecure import DjangoDatabaseSettings
databases = DjangoDatabaseSettings(os.path.join(PROJECT_ROOT, 'databases.cnf'), crypto_key_file='path/to/your/cryptokey)

DATABASES = {
    'default': 'default': databases.settings('production'),
}

Other settings

To encrypt any other setting use EncryptedStoredSettings, for example:

from djangosecure import EncryptedStoredSettings
encripted_settings = EncryptedStoredSettings('./hidden/settings/path'))

CELERY_BROKER = 'amqp://{0}:{1}@localhost//'.format(
    encripted_settings.get('celery', 'broker_username', config_file="config/file/path/here.cfg"),
    encripted_settings.get('celery', 'broker_password')
    )