title: How to hide SECRET_KEY?
body: <p>I put my SECRET_KEY in secrets.json, and that one in .gitignore; in settings.py I read the key from the file.</p>
  
  <p>Bottom line: my local server is reading the key. But when I want to produce a <code>git push heroku master</code>, an error is thrown, the file was not found. It is understandable! I added it to .gitignore. And accordingly the question: what to do? Why advise to hide SECRET_KEY in a separate file hidden from git, if then we can’t just push our changes to the server?</p>
  
  <p>I see this way out here: I can explicitly register my key in settings.py, push it on the server, hide it in the file again, push it in the github repository.</p>
  
  <p>But how safe is it? Is SECRETS_KEY hidden only for public repositories?</p>