security changes

.gitignore

@@ -10,3 +10,4 @@ __pycache__/
 app/.env
 app/.coverage
 private_media/
+.local.env

app/config/urls.py

@@ -36,6 +36,7 @@
 from django.conf.urls.static import static
 from django.contrib import admin
 from django.http import JsonResponse
+from django.shortcuts import redirect
 from django.urls import include, path, re_path
 from django.views.generic import View
 from drf_spectacular.views import SpectacularAPIView, SpectacularSwaggerView
@@ -109,6 +110,11 @@ def get(self, request, *args, **kwargs):
     ),
     path("health/", include("health_check.urls")),
     path("startup/", is_healthy),
+    path("startup/", is_healthy),
+    path(
+        ".well-known/security.txt",
+        lambda: redirect("https://www.amsterdam.nl/security.txt"),
+    ),
     re_path(r"^$", view=MyView.as_view(), name="index"),
 ] + static(settings.MEDIA_URL, document_root=settings.MEDIA_ROOT)