Configuring settings.py for maximum security

[sarah2233]

Hi everyone,

I’m trying to ensure that my settings.py file is configured for maximum security for my self-hosted Weblate instance running on Cloudron. Since the translation content is sensitive, only the assigned users should be able to access it in any way.

I’ve reviewed the documentation but would appreciate guidance or examples from others who have successfully hardened their deployments. If anyone has a recommended configuration pattern or a secure settings.py template, I’d be grateful.

Thanks in advance for any advice!

[nijel]

https://docs.weblate.org/en/latest/admin/access.html#additional-access-restrictions describes this a bit, will add DEFAULT_ACCESS_CONTROL into that as well.

[sarah2233]

Thanks!