I think we need to change the way we get all settings. Specially, we need different settings for production and development. We can do something like we have in https://github.com/NAMD/pypln.web/tree/develop/pypln/web/settings . There, we have two separate settings files (one for production and one for development), and we get the sensitive settings from config files. I can implement this, but maybe this belongs to a different branch.