Use a local_settings.py file

.gitignore

@@ -1,3 +1,4 @@
 *.pyc
 db.sqlite3
-.cache
+.cache
+local_settings.py

README.md

@@ -13,6 +13,17 @@ Run it
     sudo apt-get install python virtualenvwrapper
     mkvirtualenv transparency
     pip install -r requirements.txt
+
+Generate a secret key:
+
+    echo SECRET_KEY=`python -c "import string,random; uni=string.ascii_letters+string.digits+string.punctuation; print(repr(''.join([random.SystemRandom().choice(uni) for i in range(random.randint(45,50))])))"` > transparency/local_settings.py
+
+Create database:
+
+    ./manage migrate
+
+Run dev server
+
     ./manage.py runserver
 
 ### Later

transparency/settings.py

@@ -12,6 +12,7 @@ https://docs.djangoproject.com/en/1.8/ref/settings/
 
 # Build paths inside the project like this: os.path.join(BASE_DIR, ...)
 import os
+import sys
 
 BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 
@@ -19,9 +20,6 @@ BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 # Quick-start development settings - unsuitable for production
 # See https://docs.djangoproject.com/en/1.8/howto/deployment/checklist/
 
-# SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = 'ii4gn&9@es!fny$c)-@@$#ynrzjgz&ssdp+9en1u0dpr@n^+h-'
-
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True
 
@@ -111,3 +109,9 @@ PROVISIONING_DURATIONS = [
     (datetime.timedelta(days=365*3), '3 ans'),
     (datetime.timedelta(days=365*5), '5 ans'),
 ]
+
+try:
+    from .local_settings import *
+except ImportError:
+    sys.stderr.write('Create a local_settings.py, see README.md')
+    exit(1)