security: strip remaining hardcoded db password (env-first quote-style miss). No rotation/deploy.

d8cb94d33b77d517fd056a2415e17f12673b5b00 · 2026-09-13 00:07:05 -0700 · Steve

Files touched

M collectors/base-collector.mjs
M src/lib/db.ts

Diff

commit d8cb94d33b77d517fd056a2415e17f12673b5b00
Author: Steve <steve@designerwallcoverings.com>
Date:   Sun Sep 13 00:07:05 2026 -0700

    security: strip remaining hardcoded db password (env-first quote-style miss). No rotation/deploy.
---
 collectors/base-collector.mjs | 2 +-
 src/lib/db.ts                 | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/collectors/base-collector.mjs b/collectors/base-collector.mjs
index 940ed2f..805ca1d 100644
--- a/collectors/base-collector.mjs
+++ b/collectors/base-collector.mjs
@@ -10,7 +10,7 @@ const pool = new Pool({
   port: parseInt(process.env.DB_PORT || '5432'),
   database: process.env.DB_NAME || 'omega_watches_v2',
   user: process.env.DB_USER || 'omega_admin',
-  password: process.env.DB_PASSWORD || 'OmegaWatch2024Pass',
+  password: process.env.DB_PASSWORD || '',
   max: 5,
 });
 
diff --git a/src/lib/db.ts b/src/lib/db.ts
index 734a957..ce41f8b 100644
--- a/src/lib/db.ts
+++ b/src/lib/db.ts
@@ -5,7 +5,7 @@ const pool = new Pool({
   port: parseInt(process.env.DB_PORT || "5432"),
   database: process.env.DB_NAME || "omega_watches_v2",
   user: process.env.DB_USER || "omega_admin",
-  password: process.env.DB_PASSWORD || "OmegaWatch2024Pass",
+  password: process.env.DB_PASSWORD || "",
   max: 20,
   idleTimeoutMillis: 30000,
   connectionTimeoutMillis: 5000,

← 14e25b3 tighten .gitignore: add missing standing-rule patterns (.env · back to Omega Watches 2 · chore: version bump (session close, TK-11480 security fix) e7c5f40 →