diff --git a/.github/workflows/django-build-test.yml b/.github/workflows/django-build-test.yml
index 03801eb..98f9a9e 100644
--- a/.github/workflows/django-build-test.yml
+++ b/.github/workflows/django-build-test.yml
@@ -61,6 +61,6 @@ jobs:
           echo "/opt/sonar-scanner/bin" >> $GITHUB_PATH
 
       - name: Run SonarQube Scanner
-        run: sonar-scanner -D"sonar.projectKey=revelio" -D"sonar.sources=." -D"sonar.exclusion=**/manage.py, **/node_modules/**, **/revelio/**, **/tests.py, **/apps.py, **/admin.py, **/__init__.py" -D"sonar.host.url=https://sonarqube.cs.ui.ac.id" -D"sonar.login=$SONAR_TOKEN"
+        run: sonar-scanner -D"sonar.projectKey=revelio" -D"sonar.sources=." -D"sonar.host.url=https://sonarqube.cs.ui.ac.id" -D"sonar.login=$SONAR_TOKEN"
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
index 731558d..30d6779 100644
Binary files a/requirements.txt and b/requirements.txt differ
diff --git a/revelio/settings.py b/revelio/settings.py
index ad3a2b5..07b73a7 100644
--- a/revelio/settings.py
+++ b/revelio/settings.py
@@ -12,6 +12,11 @@
 
 from pathlib import Path
 import sys
+import environ
+
+# Create environment variable
+env = environ.Env()
+environ.Env.read_env()
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
 BASE_DIR = Path(__file__).resolve().parent.parent
@@ -21,7 +26,7 @@
 # See https://docs.djangoproject.com/en/5.0/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = 'django-insecure-o^$o854ewkumms=p^%lmvupmlp&0-5!d*ltjp%3gn8w@z3jccz'
+SECRET_KEY = env('DJANGO_SECRET_KEY')
 
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True
@@ -87,11 +92,11 @@
     DATABASES = {
     'default': {
         'ENGINE': 'django.db.backends.postgresql_psycopg2',
-        'HOST': 'aws-0-ap-southeast-1.pooler.supabase.com',
-        'NAME': 'postgres',
-        'USER': 'postgres.gkvuaueyujmheifpdqun',
+        'HOST': env('DB_HOST'),
+        'NAME': env('DB_NAME'),
+        'USER': env('DB_USER'),
         'PORT': '5432',
-        'PASSWORD': 'projectstartupReveliopastiberhasil!!!!',
+        'PASSWORD': env('DB_PASS'),
         }
     }
 
diff --git a/revelio/settings_dev.py b/revelio/settings_dev.py
index fcf94ce..28da27d 100644
--- a/revelio/settings_dev.py
+++ b/revelio/settings_dev.py
@@ -11,7 +11,11 @@
 """
 
 from pathlib import Path
-import sys
+import environ
+
+# Create environment variable
+env = environ.Env()
+environ.Env.read_env()
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
 BASE_DIR = Path(__file__).resolve().parent.parent
@@ -21,7 +25,7 @@
 # See https://docs.djangoproject.com/en/5.0/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = 'django-insecure-o^$o854ewkumms=p^%lmvupmlp&0-5!d*ltjp%3gn8w@z3jccz'
+SECRET_KEY = env('DJANGO_SECRET_KEY')
 
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True