feat: load aws secrets

compose/local/django/start

@@ -4,8 +4,8 @@ set -o errexit
 set -o pipefail
 set -o nounset
 
-python manage.py migrate
-python manage.py createsu
-python manage.py loadfixtures
+#python manage.py migrate
+#python manage.py createsu
+#python manage.py loadfixtures
 
 exec python manage.py runserver_plus 0.0.0.0:8000

config/helpers/env.py

@@ -1,3 +1,24 @@
+import json
+import os
+
+import boto3
+
 from config.env_settings import EnvSettings
 
+
+def load_aws_secrets():
+    """Load AWS Secrets into the environment variables if they exist"""
+    region = os.getenv("AWS_SECRETS_REGION")
+    secret_id = os.getenv("AWS_SECRET_ID")
+    if not region or not secret_id:
+        return
+
+    client = boto3.Session().client("secretsmanager", region_name=region)
+    response = client.get_secret_value(SecretId=secret_id)
+    secrets_dict = json.loads(response["SecretString"])
+    for key, value in secrets_dict.items():
+        os.environ[key.lower()] = str(value)
+
+
+load_aws_secrets()
 env = EnvSettings()

requirements/base.txt

@@ -4,6 +4,7 @@ Pillow==11.1.0
 argon2-cffi==23.1.0
 pydantic==2.10.6
 pydantic-settings==2.7.1
+boto3==1.36.24
 
 # Redis
 redis==5.2.1