Make BASIC_AUTH a real env override in ecosystem.config.js (rotate liveskus cred without touching source)

635e99201fe6ac30a69a3da8409ea77ed6f3b22c · 2026-07-28 20:15:14 -0700 · steve

Files touched

M ecosystem.config.js

Diff

commit 635e99201fe6ac30a69a3da8409ea77ed6f3b22c
Author: steve <steve@designerwallcoverings.com>
Date:   Tue Jul 28 20:15:14 2026 -0700

    Make BASIC_AUTH a real env override in ecosystem.config.js (rotate liveskus cred without touching source)
---
 ecosystem.config.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ecosystem.config.js b/ecosystem.config.js
index 9e23a5d..f72a765 100644
--- a/ecosystem.config.js
+++ b/ecosystem.config.js
@@ -7,7 +7,11 @@ module.exports = {
     name: 'corvette-console',
     script: 'server.js',
     cwd: __dirname,
-    env: { PORT: 9797, PGHOST: '/tmp', PGDATABASE: 'dw_unified' },
+    // BASIC_AUTH gates the now-public liveskus.designerwallcoverings.com surface.
+    // Kept in the (git-tracked) process def so the server.js override is REAL — rotate
+    // the liveskus credential here + `pm2 restart ecosystem.config.js --update-env`,
+    // independently of the other services sharing the dw-followup tunnel.
+    env: { PORT: 9797, PGHOST: '/tmp', PGDATABASE: 'dw_unified', BASIC_AUTH: 'admin:DW2024!' },
     autorestart: true,
     max_restarts: 20,
   }],

← 0d3c544 Add fleet-standard basic auth (admin/DW2024!) for public liv · back to Corvette Dashboard Viewer · Harden now-public surface: guard /img double-writeHead (ERR_ 9115bd3 →