diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 0000000..b122e57
Binary files /dev/null and b/.DS_Store differ
diff --git a/innovedus_cms/.dockerignore b/innovedus_cms/.dockerignore
index b7c39d7..51cb76f 100644
--- a/innovedus_cms/.dockerignore
+++ b/innovedus_cms/.dockerignore
@@ -1,3 +1,11 @@
 fly.toml
 .git/
+__pycache__/
+*.py[cod]
+.venv/
+.env
+.env.*
 *.sqlite3
+*.log
+media/
+static/
diff --git a/innovedus_cms/Dockerfile b/innovedus_cms/Dockerfile
index 3c36327..5015c92 100644
--- a/innovedus_cms/Dockerfile
+++ b/innovedus_cms/Dockerfile
@@ -4,6 +4,7 @@ FROM python:${PYTHON_VERSION}
 
 ENV PYTHONDONTWRITEBYTECODE 1
 ENV PYTHONUNBUFFERED 1
+ENV DJANGO_SETTINGS_MODULE=mysite.settings.production
 
 RUN mkdir -p /code
 
diff --git a/innovedus_cms/mysite/settings/production.py b/innovedus_cms/mysite/settings/production.py
index efc862f..f08a8f9 100644
--- a/innovedus_cms/mysite/settings/production.py
+++ b/innovedus_cms/mysite/settings/production.py
@@ -1,3 +1,7 @@
+import os
+
+from django.core.exceptions import ImproperlyConfigured
+
 from .base import *
 
 DEBUG = False
@@ -8,6 +12,19 @@ DEBUG = False
 # See https://docs.djangoproject.com/en/5.2/ref/contrib/staticfiles/#manifeststaticfilesstorage
 STORAGES["staticfiles"]["BACKEND"] = "django.contrib.staticfiles.storage.ManifestStaticFilesStorage"
 
+def _csv(key, fallback):
+    value = os.getenv(key, fallback)
+    return [item.strip() for item in value.split(",") if item.strip()]
+
+
+SECRET_KEY = os.getenv("DJANGO_SECRET_KEY")
+if not SECRET_KEY:
+    raise ImproperlyConfigured("DJANGO_SECRET_KEY must be set in production.")
+
+ALLOWED_HOSTS = _csv("DJANGO_ALLOWED_HOSTS", "innovedus-cms.fly.dev")
+CSRF_TRUSTED_ORIGINS = _csv("DJANGO_CSRF_TRUSTED_ORIGINS", "https://innovedus-cms.fly.dev")
+WAGTAILADMIN_BASE_URL = os.getenv("WAGTAILADMIN_BASE_URL", WAGTAILADMIN_BASE_URL)
+
 try:
     from .local import *
 except ImportError: