diff --git a/AKPlanning/settings_production.py b/AKPlanning/settings_production.py
index 094a6d1b5a00a35b0e55cd1b93042cf8d658a174..5479cb5672ebb5c1834af61ad1ff54f8f5d183bb 100644
--- a/AKPlanning/settings_production.py
+++ b/AKPlanning/settings_production.py
@@ -4,7 +4,6 @@ First, it imports all default settings, then overrides respective ones.
 Secrets are stored in and imported from an additional file, not set under version control.
 """
 
-from AKPlanning.settings import *
 import AKPlanning.settings_secrets as secrets
 
 
@@ -16,4 +15,22 @@ ALLOWED_HOSTS = secrets.HOSTS
 
 SECRET_KEY = secrets.SECRET_KEY
 
-# TODO: DB, chaching, CSRF etc.
+SESSION_COOKIE_SECURE = True
+CSRF_COOKIE_SECURE = True
+
+### DATABASE ###
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.mysql',
+        'HOST': 'localhost',
+        'NAME': secrets.DB_NAME,
+        'USER': secrets.DB_USER,
+        'PASSWORD': secrets.DB_PASSWORD,
+        'OPTIONS': {
+            'init_command': "SET sql_mode='STRICT_TRANS_TABLES'"
+        }
+    }
+}
+
+# TODO: caching
diff --git a/AKPlanning/settings_secrets.py.sample b/AKPlanning/settings_secrets.py.sample
index 3f0d58ad26b4dd1c30f6b689ec44ef2ca0188e98..a051c21e3c3d29ed4d288bf47f1a892b720a6a83 100644
--- a/AKPlanning/settings_secrets.py.sample
+++ b/AKPlanning/settings_secrets.py.sample
@@ -1,3 +1,9 @@
 SECRET_KEY = ''
 
 HOSTS = []
+
+DB_NAME = ''
+
+DB_USER = ''
+
+DB_PASSWORD = ''
\ No newline at end of file