diff --git a/dal/settings.py b/dal/settings.py
index ee96962..9fd3169 100644
--- a/dal/settings.py
+++ b/dal/settings.py
@@ -32,7 +32,9 @@ AUTH_LDAP_START_TLS = os.environ.get('LDAP_USE_TLS', False)
 
 BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 
-ALLOWED_HOSTS = []
+ALLOWED_HOSTS = os.environ.get('ALLOWED_HOSTS', 'localhost')
+
+DEBUG = os.environ.get('DEBUG', False)
 
 INSTALLED_APPS = [
     'django.contrib.admin',
@@ -131,6 +133,3 @@ DATABASES = {
     }
 }
 SECRET_KEY = os.environ.get('SECRET_KEY')
-
-# SECURITY WARNING: don't run with debug turned on in production!
-DEBUG = os.environ.get('DEBUG', False)