title: Where to store secret keys DJANGO
body: <p>For the life of me, I have been looking for this everywhere and have not found the answer. I hope I am not posting a duplicate.</p>
  
  <p>It is advised everywhere that you should keep your secret keys in a separate file from your general settings.py. Also, that you should never commit your "secret.py" file that contains keys such as SECRET_KEY, AWS_SECRET_KEY and so on. </p>
  
  <p>My question is: In your production server, you need to reference your secret keys, that means that your "secret.py" settings file, should live somewhere around the server right? If so, how do you protect your secret keys in production? </p>