Settings and environment variables

Set by Pulumi on the Web App

Variable	Purpose
IS_AZURE_ENVIRONMENT	Enables Azure-specific settings
SCM_DO_BUILD_DURING_DEPLOYMENT	Oryx build on deploy
PRE_BUILD_COMMAND	Bootstrap curl
POST_BUILD_COMMAND	cicd/post_build.sh
DISABLE_*_BUILD	Disable unrelated Oryx detectors
DISABLE_COLLECTSTATIC	Defer collectstatic to startup
HEALTH_CHECK_PATH	/health-check
DJANGO_SETTINGS_MODULE	Your settings module
DJANGO_SECRET_KEY	Random 50-char string
DJANGO_ALLOWED_HOSTS	Comma-separated hosts from HostDefinitions
DJANGO_HOSTS_MAP	JSON host→aliases when aliases exist
AZURE_KEY_VAULT	Vault name
AZURE_STORAGE_ACCOUNT_NAME	Storage account
AZURE_STORAGE_CONTAINER_MEDIA / _STATICFILES	Blob containers
CDN_HOST / CDN_PROFILE / CDN_ENDPOINT	CDN wiring
DB_HOST / DB_NAME / DB_USER	Postgres connection
REDIS_SIDECAR	When Redis enabled
DJANGO_TASKS	When tasks enabled
AZURE_COMMUNICATION_SERVICE_ENDPOINT	When ACS enabled
WEBSITE_HTTPLOGGING_RETENTION_DAYS	When retention > 0
{ENV}_SECRET_NAME	Key Vault secret names from secrets=
plus	Consumer environment_variables

Azure also injects WEBSITE_HOSTNAME (and others).

Read by pulumi_django_azure.settings

Also consumed when present:

• DJANGO_DEFAULT_FROM_EMAIL
• AZURE_CACHE_CONTROL (default long-lived immutable)
• REDIRECT_ALIASES (bool, default true)
• CICD_SCRIPTS_BRANCH (bootstrap; not settings.py)

Helper

patch_django_settings_for_azure(INSTALLED_APPS, MIDDLEWARE, TEMPLATES) — see Django app.

Runtime clients

When configured:

• AZURE_KEY_VAULT_CLIENT — Key Vault SecretClient
• AZURE_CREDENTIAL / storage token credential via managed identity helpers in azure_helper.py