I was going to look at your code to see if you were locked into Django and I noticed you are saving sensitive info into github.

Here is a link with more info,
https://dev.to/somedood/please-dont-commit-env-3o9h
but long story short you need to:

1. regenerate your secret
2. add .env to your .gitignore
3. save empty vars to .env-default(commit this to git)
4. remove .env from being tracked
5. push to github and ensure .env doesnt exist
6. use .env-config to make .env and complete the variables with correct answers

Following these steps will help keep your webapp secure