security: strip hardcoded dw_admin DSN password -> env-first/passwordless. No rotation/deploy.

b51c3530328df5136547bcfdbb1ec67037131408 · 2026-05-30 09:49:20 -0700 · Steve

Files touched

M lib/db.ts

Diff

commit b51c3530328df5136547bcfdbb1ec67037131408
Author: Steve <steve@designerwallcoverings.com>
Date:   Sat May 30 09:49:20 2026 -0700

    security: strip hardcoded dw_admin DSN password -> env-first/passwordless. No rotation/deploy.
---
 lib/db.ts | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/lib/db.ts b/lib/db.ts
index 524dd25..9967bd5 100644
--- a/lib/db.ts
+++ b/lib/db.ts
@@ -1,10 +1,10 @@
 import { Pool, QueryResult, QueryResultRow } from 'pg';
 
 const pools: Record<string, Pool> = {
-  sdcc: new Pool({ connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/sdcc', max: 3 }),
-  grant: new Pool({ connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/grant_app', max: 3 }),
-  patty: new Pool({ connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/patty', max: 3 }),
-  freddy: new Pool({ connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/freddy', max: 3 }),
+  sdcc: new Pool({ connectionString: 'postgresql://dw_admin@127.0.0.1:5432/sdcc', max: 3 }),
+  grant: new Pool({ connectionString: 'postgresql://dw_admin@127.0.0.1:5432/grant_app', max: 3 }),
+  patty: new Pool({ connectionString: 'postgresql://dw_admin@127.0.0.1:5432/patty', max: 3 }),
+  freddy: new Pool({ connectionString: 'postgresql://dw_admin@127.0.0.1:5432/freddy', max: 3 }),
 };
 
 for (const [name, pool] of Object.entries(pools)) {

← 0a989d6 harden(auth): add scrypt + rate-limit + refuse-to-boot to /a · back to Hub · Add 3 guest login tiers via shared capability layer + deploy ca36a3d →