security: drop hardcoded admin-pass fallback; random per-boot secret if COMPLIANCE_ADMIN_PASS unset

84971d3ba58568263d127ff99867048d246bfc3e · 2026-05-31 17:18:43 -0700 · SteveStudio2

Files touched

M src/server.js

Diff

commit 84971d3ba58568263d127ff99867048d246bfc3e
Author: SteveStudio2 <stevestudio2@SteveStacStudio.lan>
Date:   Sun May 31 17:18:43 2026 -0700

    security: drop hardcoded admin-pass fallback; random per-boot secret if COMPLIANCE_ADMIN_PASS unset
---
 src/server.js | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/server.js b/src/server.js
index 998ff78..b7cdac9 100644
--- a/src/server.js
+++ b/src/server.js
@@ -17,7 +17,10 @@ const { Pool } = require('pg');
 
 const PORT = parseInt(process.env.PORT || '9853', 10);
 const ADMIN_USER = process.env.COMPLIANCE_ADMIN_USER || 'admin';
-const ADMIN_PASS = process.env.COMPLIANCE_ADMIN_PASS || 'DWSecure2024!';
+// No hardcoded fallback: if COMPLIANCE_ADMIN_PASS is unset, use a random
+// per-boot secret so admin login is disabled-by-default rather than shipping a
+// known password. Set COMPLIANCE_ADMIN_PASS in the gitignored .env to enable.
+const ADMIN_PASS = process.env.COMPLIANCE_ADMIN_PASS || crypto.randomBytes(24).toString('hex');
 
 const pool = new Pool({
   connectionString: process.env.DATABASE_URL || 'postgresql://stevestudio2@/compliance?host=/tmp',

← 6a0e493 initial snapshot — gitify all builds (CLAUDE.md rule 2026-05 · back to Compliance Agent · (newest)