refactor: Replace dotenv with django-environ and enhance security

backoffice/settings/base.py

@@ -13,21 +13,23 @@
 import os
 from pathlib import Path
 
-from dotenv import load_dotenv
+import environ
 
-load_dotenv()
+env = environ.Env(DEBUG=(bool, False))
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
 BASE_DIR = Path(__file__).resolve().parent.parent.parent
 
+environ.Env.read_env(os.path.join(BASE_DIR, ".env"))
+
 # Quick-start development settings - unsuitable for production
 # See https://docs.djangoproject.com/en/5.1/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = os.getenv("SECRET_KEY")
+SECRET_KEY = env("SECRET_KEY")
 
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = True
+DEBUG = False
 
 ALLOWED_HOSTS = []
 

backoffice/settings/local.py

@@ -1,5 +1,7 @@
 from .base import *  # noqa: F401, F403
 
+DEBUG = True
+
 INTERNAL_IPS = [
     "127.0.0.1",
     "localhost",

backoffice/settings/prod.py

@@ -1,7 +1,5 @@
 from .base import *  # noqa: F401, F403
 
-DEBUG = False
-
 ALLOWED_HOSTS = ["*"]  # TODO: 추후 도메인 설정 후 변경
 
 # TODO: 추후 도메인 설정 후 CSRF_TRUSTED_ORIGINS, CORS_ALLOWED_ORIGINS에 추가

pyproject.toml

@@ -11,6 +11,7 @@ django = "^5.1.3"
 python-dotenv = "^1.0.1"
 django-cors-headers = "^4.6.0"
 django-extensions = "^3.2.3"
+django-environ = "^0.11.2"
 
 
 [tool.poetry.group.dev.dependencies]