What information should be hidden from other people?

Question

Django

I hid the secret key when uploading the project to github like this: https://stackoverflow.com/questions/31883505/how-t...
But besides it, the postgresql database has ENGINE, NAME, USER, PASSWORD, HOST, PORT parameters - if someone else finds out this data, will he be able to connect to my database? And do all these parameters need to be hidden or just the password?

Answer 1

Database accesses are sensitive data. They should be passed in the same way as SECRET_KEY, like Redis accesses (for example). For convenient work with this, there is a dj_database_url module, which makes it possible to transfer access to the database to one environment variable.