diff --git a/.env-sample b/.env-sample
index a94c75d7..55ac4548 100644
--- a/.env-sample
+++ b/.env-sample
@@ -18,6 +18,7 @@ MARKET_PRICE_APIS = https://blockchain.info/ticker, https://api.yadio.io/exrates
 
 # Host e.g. robosats.com
 HOST_NAME = ''
+SECRET_KEY = 'django-insecure-6^&6uw$b5^en%(cu2kc7_o)(mgpazx#j_znwlym0vxfamn2uo-'
 
 # e.g. robotestagw3dcxmd66r4rgksb4nmmr43fh77bzn2ia2eucduyeafnyd.onion
 ONION_LOCATION = ''
diff --git a/Dockerfile b/Dockerfile
index dd077f95..3b1ed2ad 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -30,4 +30,4 @@ RUN sed -i 's/^import .*_pb2 as/from . \0/' api/lightning/invoices_pb2_grpc.py
 
 EXPOSE 8000
 
-CMD ["python3", "manage.py", "runserver", "0.0.0.0:8000]
\ No newline at end of file
+CMD ["python3", "manage.py", "runserver", "0.0.0.0:8000"]
\ No newline at end of file
diff --git a/robosats/settings.py b/robosats/settings.py
index 0f9f2565..1eba00a0 100644
--- a/robosats/settings.py
+++ b/robosats/settings.py
@@ -23,7 +23,7 @@ STATIC_URL = '/static/'
 # See https://docs.djangoproject.com/en/4.0/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = 'django-insecure-6^&6uw$b5^en%(cu2kc7_o)(mgpazx#j_znwlym0vxfamn2uo-'
+SECRET_KEY = config('SECRET_KEY')
 
 DEBUG = False
 STATIC_URL = '/static/'