Topic area

Security & configuration

Settings that decide how Django behaves in production, and the hardening around it.

layers, from the network inwardNetworkfirewall, private database and RedisTransportTLS, HSTS, secure cookiesDjango settingsDEBUG off, hosts, CSRF, headersSecretsoutside Git, rotated, least privilegeEach layer limits what a failure in the one above it can do

Security for a Django deployment is layered: the network, the transport, Django’s own settings, and the secrets that hold it together. A gap in one layer should not expose the others.

The topics here cover hardening each layer and handling settings and secrets correctly, which is where most real incidents begin.

102 topic memberships across the area; a guide can belong to more than one topic.