diff --git a/sapl/settings.py b/sapl/settings.py
index 470f0b746..ef69a37c2 100644
--- a/sapl/settings.py
+++ b/sapl/settings.py
@@ -14,16 +14,21 @@ from unipath import Path
 from .temp_suppress_crispy_form_warnings import \
     SUPRESS_CRISPY_FORM_WARNINGS_LOGGING
 
+from decouple import config
+
+from dj_database_url import parse as db_url
+
 BASE_DIR = Path(__file__).ancestor(2)
 
+
 # Quick-start development settings - unsuitable for production
 # See https://docs.djangoproject.com/en/1.8/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = '!9g1-#la+#(oft(v-y1qhy$jk-2$24pdk69#b_jfqyv!*%a_)t'
+SECRET_KEY = config('SECRET_KEY')
 
 # SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = True
+DEBUG = config('DEBUG', default=False, cast=bool)
 
 ALLOWED_HOSTS = ['*']
 
@@ -105,21 +110,17 @@ WSGI_APPLICATION = 'sapl.wsgi.application'
 # https://docs.djangoproject.com/en/1.8/ref/settings/#databases
 
 DATABASES = {
-    'default': {
-        'ENGINE': 'django.db.backends.postgresql_psycopg2',
-        'NAME': 'sapl',
-        'USER': 'sapl',
-        'PASSWORD': 'sapl',
-        'HOST': 'localhost',
-        'PORT': '5432',
-    }
+    'default': config(
+        'DATABASE_URL',
+        cast=db_url,
+    )
 }
 
-EMAIL_USE_TLS = True
-EMAIL_HOST = ''
-EMAIL_HOST_USER = ''
-EMAIL_HOST_PASSWORD = ''
-EMAIL_PORT = 587
+EMAIL_USE_TLS = config('EMAIL_USE_TLS', cast=bool)
+EMAIL_HOST = config('EMAIL_HOST', cast=str)
+EMAIL_HOST_USER = config('EMAIL_HOST_USER', cast=str)
+EMAIL_HOST_PASSWORD = config('EMAIL_HOST_PASSWORD', cast=str)
+EMAIL_PORT = config('EMAIL_PORT', cast=int)
 
 MAX_DOC_UPLOAD_SIZE = 5*1024*1024  # 5MB
 MAX_IMAGE_UPLOAD_SIZE = 2*1024*1024  # 2MB