security: strip hardcoded dw_admin DSN password -> env-first. No rotation/deploy.

6f849da2057b9c8b57bb41bebf24fe1510c3a654 · 2026-05-30 09:32:50 -0700 · steve

Files touched

M ecosystem.config.js

Diff

commit 6f849da2057b9c8b57bb41bebf24fe1510c3a654
Author: steve <steve@designerwallcoverings.com>
Date:   Sat May 30 09:32:50 2026 -0700

    security: strip hardcoded dw_admin DSN password -> env-first. No rotation/deploy.
---
 ecosystem.config.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ecosystem.config.js b/ecosystem.config.js
index d943616..47abe70 100644
--- a/ecosystem.config.js
+++ b/ecosystem.config.js
@@ -8,7 +8,7 @@ module.exports = {
       ARCHIVE_SCAN_MINUTES: 60,
       SHOPIFY_STORE: 'designer-laboratory-sandbox.myshopify.com',
       SHOPIFY_ADMIN_TOKEN: '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',
-      DATABASE_URL: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified',
+      DATABASE_URL: (process.env.DATABASE_URL || 'postgresql://dw_admin@127.0.0.1:5432/dw_unified'),
     },
     error_file: '/root/DW-Agents/archive-agent/logs/error.log',
     out_file: '/root/DW-Agents/archive-agent/logs/out.log',

← 902fdfe add 404-guard middleware for snapshot/backup-file paths · back to Archive Agent · fix: wrap all async DB route handlers in try/catch to preven 8c05511 →