← back to Dw Pitch Followup

CHANGELOG.md

14 lines

# dw-pitch-followup — changelog

## 2026-08-17
- **Rotated public tunnel Basic-Auth to the shared fleet credential.**
  Changed `BASIC_AUTH` in the (gitignored) `.env` from the site-specific
  password to the standard fleet cred (`admin` / fleet password), then
  `pm2 restart dw-pitch-followup --update-env` so the process re-read `.env`.
  The pm2 env leaves `BASIC_AUTH` unset, so the app resolves it from `.env`
  via `envLocal()` at startup (`server.js:97`).
  Verified: `http://pitch.designerwallcoverings.com/` → 200 with the new cred;
  old cred and no-cred → 401. The restart also reset the in-memory
  brute-force lockout map (`server.js:112`), clearing a prior 429.
  NOTE: prospects previously handed the old password must now use the new one.