Yes, put the configuration there *but* the secret key... should be secret. If you include it in the repo as it's now, its a bit useless. You can put it as an environment variable (and set the environment variable in the server) and that would solve that problem.