security: strip hardcoded dw_admin DSN password -> env-first/passwordless. No rotation/deploy.

e28149b7db83661bb9bfbc0b0e0d4f135453dcd8 · 2026-05-30 09:49:20 -0700 · Steve

Files touched

M scripts/pull-hybrid.js

Diff

commit e28149b7db83661bb9bfbc0b0e0d4f135453dcd8
Author: Steve <steve@designerwallcoverings.com>
Date:   Sat May 30 09:49:20 2026 -0700

    security: strip hardcoded dw_admin DSN password -> env-first/passwordless. No rotation/deploy.
---
 scripts/pull-hybrid.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/pull-hybrid.js b/scripts/pull-hybrid.js
index 54c1a05..feafd18 100644
--- a/scripts/pull-hybrid.js
+++ b/scripts/pull-hybrid.js
@@ -5,7 +5,7 @@ const fs = require('fs');
 const path = require('path');
 const { Pool } = require('pg');
 
-const pool = new Pool({ connectionString: process.env.DW_UNIFIED_URL || 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:15432/dw_unified' });
+const pool = new Pool({ connectionString: process.env.DW_UNIFIED_URL || 'postgresql://dw_admin@127.0.0.1:15432/dw_unified' });
 
 const PATTERN_REGEX = '(neon kiss|triangle land|terrazzo|checkerboard|hicks hexagon|prism multi|feather fan|memphis|geometry pastel|arch deco|alice confetti|prisma pastel|neon city|your own world|eyes and circles|tiami|metromod|riviera linen)';

← b66663a feat(fleet): theme1/theme2 query-param-gated toggle on catal · back to 1980swallpaper · fix: remove served .bak leak, fix backup-block regex to cove 8c318f7 →