For set up, tests, and code standards, see the documentation.
Because this comes up frequently:
I will not accept a pull request or issue attempting to handle client IP address when Django is behind a proxy.
Ratelimit is the wrong place for this. There are more details in the security chapter of the documentation.