security: strip hardcoded dw_admin DSN password -> env-first/passwordless. No rotation/deploy.

0d77497f2220c8c882924f2db07443a6b295e9bf · 2026-05-30 09:49:20 -0700 · Steve

Files touched

M server.js

Diff

commit 0d77497f2220c8c882924f2db07443a6b295e9bf
Author: Steve <steve@designerwallcoverings.com>
Date:   Sat May 30 09:49:20 2026 -0700

    security: strip hardcoded dw_admin DSN password -> env-first/passwordless. No rotation/deploy.
---
 server.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.js b/server.js
index 2e88e53..7034eb7 100644
--- a/server.js
+++ b/server.js
@@ -13,7 +13,7 @@ const AUTH_PASS = 'DWSecure2024!';
 
 // Database
 const pool = new Pool({
-  connectionString: 'postgresql://dw_admin:DW2024SecurePass@127.0.0.1:5432/dw_unified',
+  connectionString: 'postgresql://dw_admin@127.0.0.1:5432/dw_unified',
   max: 5,
   idleTimeoutMillis: 10000,
   connectionTimeoutMillis: 5000,

← 675d449 Fix package.json main field to server.js and add start scrip · back to Dw Showroom · fix: honor PORT env var in server.js; add bak/pre/orig to .g c1fad44 →