Validate Python environment settings before starting the application

Separate an absent setting from an empty one

With no default argument, os.getenv("PORT") returns None when PORT is absent. If the variable exists with an empty value, it returns an empty string. Check these states separately when they have different meanings. For example, an absent optional port might use a default, while an explicitly empty required setting should produce a configuration error.

Avoid selecting a default with raw or default_value unless that policy intentionally treats all empty strings as missing. Read a setting once into a local variable so that parsing, error reporting and subsequent application startup use the same value.

Parse a port with a declared contract

The following standard-library example accepts a string or None. It uses int for decimal integer conversion and checks the inclusive range 1 through 65535. The fixed messages identify the problem without echoing the supplied value. Range validation does not prove that the port is available or that the process has permission to bind it.

def parse_port(raw):
    if raw is None:
        raise ValueError("PORT is missing")
    if not isinstance(raw, str):
        raise TypeError("PORT must be text")
    if not raw.strip():
        raise ValueError("PORT is empty")
    try:
        port = int(raw)
    except ValueError:
        raise ValueError("PORT must be an integer") from None
    if not 1 <= port <= 65535:
        raise ValueError("PORT is outside 1..65535")
    return port

for sample in ("8080", None, "", "wrong", "65536"):
    try:
        print(parse_port(sample))
    except ValueError as error:
        print(error)

Read the illustrative result correctly

Tracing the supplied inputs gives 8080, then PORT is missing, PORT is empty, PORT must be an integer, and PORT is outside 1..65535. These are expected results of the shown logic, not a report of an executed deployment test. int also accepts some text forms such as surrounding whitespace; add a stricter lexical rule if your application contract needs one.

For the actual process, import os and pass os.getenv("PORT") to the function. Keep any policy for choosing an optional default outside the parser, so it is clear whether a missing required setting should stop startup.

Interpret booleans explicitly

bool("false") is True because a nonempty string is truthy. Instead, normalize a supported textual representation and look it up in an explicit mapping. You may accept true, yes, on and 1 as true, and false, no, off and 0 as false; reject other strings rather than silently enabling a feature.

ConfigParser.getboolean(section, option) offers such conversions for options in a ConfigParser object. It does not automatically convert a string obtained from os.getenv. These are separate interfaces.

Validate before starting useful work

Gather settings and validate them before connecting to databases, opening a listening socket or starting background jobs. Return one clear configuration error to the process supervisor. Catching every failure and continuing with guessed defaults can conceal a broken deployment.

After validation, keep a configuration object with converted values. Repeatedly reading and parsing an environment value in each request is harder to reason about and can leave different parts of the application using different policies.

Specify precedence in your own application

If an application uses command-line arguments, environment variables and an INI file, define which source wins. A possible policy is an explicitly supplied argument, then a present environment setting, then a file option, then a documented default. This is an application choice, not a built-in ordering enforced by configparser.

ConfigParser can read files and perform option conversions, but it does not automatically merge the operating system environment or command-line arguments. Do not describe a .env file as already loaded unless a launcher or an explicit library has loaded it.

Report the setting name without its secret value

Log the name and validation category, such as DATABASE_URL is missing, without including the connection string. A token can appear inside a URL, not only in a setting whose name includes PASSWORD. Avoid dumping all environment variables when diagnosing startup.

For a nonsecret setting, decide separately whether displaying its value is appropriate. The parser example uses fixed error messages to make that distinction straightforward.

Understand what process configuration changes

os.environ represents the current process environment and is captured when os is imported. Updating it changes this process and can affect children it starts; it does not reconfigure an already running unrelated process. Restart or explicitly reconfigure the relevant service when changing its deployment settings.

Operating system behavior differs, including case handling of names on Windows. The bytes environment interface is available only where os.supports_bytes_environ permits it. Use the normal string interface for ordinary application configuration unless a documented platform requirement demands otherwise.