.env

Django settings

• DEFAULT_FROM_EMAIL=noreplay@example.com
• SECURE_HSTS_SECONDS=0
• ADMINS=admin@example.com
• SECURE_CONTENT_TYPE_NOSNIFF=True
• SECURE_BROWSER_XSS_FILTER=True
• SECURE_SSL_REDIRECT=True
• SECURE_HSTS_PRELOAD=True
• SECURE_HSTS_INCLUDE_SUBDOMAINS=True
• SESSION_COOKIE_SECURE=True
• SESSION_COOKIE_HTTPONLY=True
• CSRF_COOKIE_SECURE=True
• CSRF_COOKIE_HTTPONLY=True
• X_FRAME_OPTIONS=DENY

Exchange Core settings

PROJECT_NAME=Example

Used for every place who we need to show the name of the company to the user. This variable is also available in any template as PROJECT_NAME context variable.

DOMAIN=https://example.com

Used when we need to show the domain link to the user or create full urls with {% url %} template tag. This variable is also available in any template as DOMAIN context variable.

ACCOUNT_PASSWORD_EXPIRY=0

Obliges the user to change its password every x days. Leave 0 (zero) for disabled it. This is a config of the django-user-accounts package.

MAILGUN_API_KEY=api-thisisainvalidapikey
MAILGUN_SENDER_DOMAIN=mg.example.com

Mailgun is the e-mail server used by our Exchange. These two configure variables above sets the Mailgun account to be used for processing all Exchange e-mail stuff.

SESSION_SECURITY_EXPIRE_AFTER=900

This setting tells how much time the user can stay inactive. We use this for security reasons, in case of the user forget it session opened. After the time gets end, the Django automatically logout the user. The package used for add this behavior is the django-session-security.

AWS_ACCESS_KEY_ID=thisisainvalidapikey
AWS_SECRET_ACCESS_KEY=thisisainvalidapikey
AWS_STORAGE_BUCKET_NAME=example

For handling file storage in the Exchange, we use the Amazon AWS S3 service., who does the hard work for us and make the integration between S3 and Django is the django-storages package.

ADMIN_URL_PREFIX=admin/

Django admin URL from xample.com/admin to example.com/abc-admin-security-url, or something more difficult to guess. If exposed the admin can be be hacked and the Exchange data compromised.

LANGUAGE_CSS_CLASSES=en:flag-icon-us,pt_BR:flag-icon-br,pt-br:flag-icon-br,es:flag-icon-es

Maps a relation between a Django i18n language code and a custom css class. This is useful for build the frontend languages dropdown menu with minimum effort.

DATABASE_URL=postgres://db_username:db_password@db_host_ip_or_domain:5432/db_database_name

Sets the Exchange database using a URL scheme provided by the dj-database-url Django package.