Configuring settings.py to be safe with the django secret key

Author: 0x0elliot

.env_template

@@ -1,3 +1,4 @@
 POSTGRES_DB=main
 POSTGRES_USER=admin
 POSTGRES_PASSWORD=admin
+DJANGO_SECRET_KEY=8a72377bee5adeff7158a7f9d5b72a31853a439e8a736c07b98b1051240f18cc

urNode-backend/ur_node/api_app/core/chains/ethereum/goerli-testnet/geth.yaml

@@ -17,14 +17,14 @@ spec:
     spec:
       terminationGracePeriodSeconds: 300
       containers:
-        - name: GoerliTestnetgeth
+        - name: geth
           image: ethereum/client-go
           ports:
-            - { containerPort: 8545, targetPort: 8545 }
-            - { containerPort: 8546, targetPort: 8546 }
-            - { containerPort: 8551, targetPort: 8551 }
-            - { containerPort: 30303, protocol: TCP, targetPort: 30303 }
-            - { containerPort: 30303, protocol: UDP, targetPort: 30303 }
+            - { containerPort: 8545 }
+            - { containerPort: 8546 }
+            - { containerPort: 8551 }
+            - { containerPort: 30303, protocol: TCP }
+            - { containerPort: 30303, protocol: UDP }
           args:
             [
               "--http",
@@ -53,8 +53,8 @@ spec:
               memory: 2G
               cpu: 1000m
             limits:
-              memory: 3G
-              cpu: 3000m
+              memory: 16G
+              cpu: 8000m
           livenessProbe:
             httpGet:
               path: /

urNode-backend/ur_node/api_app/core/chains/ethereum/goerli-testnet/jwt.hex

@@ -0,0 +1 @@
+286b9bb4af60c092cee6451a7d50bf729cb7560a2d59e5e85fecebfe6221a86c

urNode-backend/ur_node/api_app/core/chains/ethereum/goerli-testnet/kustomization.yaml

@@ -6,6 +6,7 @@ resources:
   - service.yaml
   - geth.yaml
   - prysm.yaml
+  - 0namespace.yaml
 configMapGenerator:
   - name: geth-jwt
     files: ["jwt.hex"]

urNode-backend/ur_node/api_app/core/chains/ethereum/goerli-testnet/prysm.yaml

@@ -50,10 +50,10 @@ spec:
               port: 4000
           resources:
             limits:
-              cpu: 1000m
-              memory: 2G
+              cpu: 8000m
+              memory: 16G
             requests:
-              cpu: 2000m
+              cpu: 1000m
               memory: 4G
           volumeMounts:
             - mountPath: /data

urNode-backend/ur_node/api_app/core/chains/ethereum/goerli-testnet/pvc.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   resources:
     requests:
-      storage: 5i
+      storage: 5Gi
   volumeMode: Filesystem
   storageClassName: ebs-gp3
   accessModes:
@@ -18,7 +18,7 @@ metadata:
 spec:
   resources:
     requests:
-      storage: 5i
+      storage: 5Gi
   volumeMode: Filesystem
   storageClassName: ebs-gp3
   accessModes:

urNode-backend/ur_node/ur_node/settings.py

@@ -1,4 +1,5 @@
 import os
+import secrets
 from datetime import timedelta
 from pathlib import Path
 
@@ -10,7 +11,7 @@
 # See https://docs.djangoproject.com/en/3.2/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = "django-insecure-=d1u1(vn$wwn&h2h40r9#&7*j1cbu$9rtl4)nnyjb4$0vp43h1"
+SECRET_KEY = os.environ.get("DJANGO_SECRET_KEY", secrets.token_hex())
 
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True