security: env-ify boardroom config — remove leaked Gemini key (...S2ic) + plaintext AUTH_PASS from tracked source

1d42552a43ee2088ffaf65a7ba623d328f681df3 · 2026-06-23 17:33:48 -0700 · Steve

Files touched

M ecosystem.config.cjs

Diff

commit 1d42552a43ee2088ffaf65a7ba623d328f681df3
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue Jun 23 17:33:48 2026 -0700

    security: env-ify boardroom config — remove leaked Gemini key (...S2ic) + plaintext AUTH_PASS from tracked source
---
 ecosystem.config.cjs | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/ecosystem.config.cjs b/ecosystem.config.cjs
index 3825241..784a16b 100644
--- a/ecosystem.config.cjs
+++ b/ecosystem.config.cjs
@@ -1,3 +1,7 @@
+// Load secrets from a gitignored .env before pm2 evaluates this config.
+// REQUIRED on the host before (re)start: GEMINI_API_KEY + BOARDROOM_AUTH_PASS in env or .env
+try { require('dotenv').config(); } catch (_) {}
+
 module.exports = {
   apps: [
     {
@@ -8,9 +12,9 @@ module.exports = {
         PORT: 4040,
         NODE_ENV: 'production',
         GOVERNANCE_URL: 'http://127.0.0.1:4020',
-        GEMINI_KEY: 'REDACTED_GEMINI_KEY',
+        GEMINI_KEY: process.env.GEMINI_API_KEY || process.env.GEMINI_KEY,
         AUTH_USER: 'admin',
-        AUTH_PASS: 'REDACTED_PASSWORD',
+        AUTH_PASS: process.env.BOARDROOM_AUTH_PASS || process.env.AUTH_PASS,
         FRONTEND_URL: 'http://45.61.58.125:4050',
       },
       node_args: '--max-old-space-size=128',

← 3568687 Stage env-ified boardroom config (Gemini key + auth pass) — · back to Dw Boardroom V2 · security: env-ify 4 boardroom files leaking DWSecure2024! pl 7cd839e →