dw-pairs-well: scrub real-looking DB password from tracked .env.example

fbbb236930fac497c064a64c3799c051f80e738b · 2026-05-20 01:21:31 -0700 · Steve Abrams

DATABASE_URL had a credential 'DW2024SecurePass' baked into the tracked
.env.example — this is the shared DW dev-DB credential used fleet-wide
(per security punch-list Tier 2 #11). Replaced literal with CHANGE_ME
placeholder so the tracked file no longer broadcasts the password to
anyone who clones the repo.

Real .env (untracked, gitignored) on Mac2 + Kamatera keeps the working
value. If this password is still actively used in prod, rotate it as
part of the broader DW DB credential rotation tracked in
~/Projects/_yolo-security-punchlist-2026-05-20.md.

Files touched

M .env.example

Diff

commit fbbb236930fac497c064a64c3799c051f80e738b
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Wed May 20 01:21:31 2026 -0700

    dw-pairs-well: scrub real-looking DB password from tracked .env.example
    
    DATABASE_URL had a credential 'DW2024SecurePass' baked into the tracked
    .env.example — this is the shared DW dev-DB credential used fleet-wide
    (per security punch-list Tier 2 #11). Replaced literal with CHANGE_ME
    placeholder so the tracked file no longer broadcasts the password to
    anyone who clones the repo.
    
    Real .env (untracked, gitignored) on Mac2 + Kamatera keeps the working
    value. If this password is still actively used in prod, rotate it as
    part of the broader DW DB credential rotation tracked in
    ~/Projects/_yolo-security-punchlist-2026-05-20.md.
---
 .env.example | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.env.example b/.env.example
index 959d7e2..b983a6c 100644
--- a/.env.example
+++ b/.env.example
@@ -1,3 +1,3 @@
-DATABASE_URL=postgresql://dw_admin:DW2024SecurePass@127.0.0.1:15432/dw_unified
+DATABASE_URL=postgresql://dw_admin:CHANGE_ME@127.0.0.1:15432/dw_unified
 PORT=9813
 CORS_ORIGIN=https://designerwallcoverings.com,https://www.designerwallcoverings.com,https://designer-laboratory-sandbox.myshopify.com,https://wallco.ai,https://www.wallco.ai,http://127.0.0.1:9792,http://localhost:9792

← 5f8d1eb gitignore: exclude logs/ directory (server logs, watcher log · back to Dw Pairs Well · harden .gitignore: add backup/temp file patterns to prevent 95606ac →