Optimizing Django Admin for production
While working with Django Admin in production, there are a few tips and tricks that you should follow to get the most out of Django. I have experienced a lot of challenges firsthand since developers bloat Django Admin with more and more administrative tasks. So let’s look at a few good practices and optimizations that can help us use Django Admin to its full potential.
Renaming admin URLs
By default, Django Admin is configured to be accessible in the /admin
path. However, Django Admin has access to all the data of your website; this is why it is important to move the path from /admin
to some unguessable path, such as /blog-cms
.
Different packages let us improve security. For example, django-admin-honeypot (https://github.com/dmpayton/django-admin-honeypot) is a package that creates fake admin pages and tricks attackers into accessing a dummy admin interface.
Using two-factor authentication (2FA) for admin users
Django Admin...