security: strip hardcoded dw_admin DSN password -> env-first/passwordless. No rotation/deploy.

b82ac869cd130bd2a72391663468471e1bee10a3 · 2026-05-30 09:49:20 -0700 · Steve

Files touched

M src/lib/db.ts

Diff

commit b82ac869cd130bd2a72391663468471e1bee10a3
Author: Steve <steve@designerwallcoverings.com>
Date:   Sat May 30 09:49:20 2026 -0700

    security: strip hardcoded dw_admin DSN password -> env-first/passwordless. No rotation/deploy.
---
 src/lib/db.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/db.ts b/src/lib/db.ts
index d1f4a69..b3d0fdb 100644
--- a/src/lib/db.ts
+++ b/src/lib/db.ts
@@ -1,7 +1,7 @@
 import { Pool } from 'pg';
 
 const pool = new Pool({
-  connectionString: process.env.DATABASE_URL || 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified',
+  connectionString: process.env.DATABASE_URL || 'postgresql://dw_admin@127.0.0.1:5432/dw_unified',
 });
 
 export default pool;

← 0a30a50 initial scaffold (gitify-all 2026-05-06) · back to StudentLoanTracker · Strip hardcoded Shopify API tokens from source (env-first); 56a9673 →