Yup. Secrets are handled in env vars, and that dj_database_url thing is a convenience app that parses a database connection URL and creates a django config from it. Super handy.