secret-strip: remove hardcoded dw_admin password from PG config (env-first, no rotation/deploy)

d7447f189ef5597166c9d58f7fe48a57ae7b8c7e · 2026-06-22 09:25:46 -0700 · Steve Abrams

Files touched

M scripts/_shop.js
M scripts/push.js

Diff

commit d7447f189ef5597166c9d58f7fe48a57ae7b8c7e
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Jun 22 09:25:46 2026 -0700

    secret-strip: remove hardcoded dw_admin password from PG config (env-first, no rotation/deploy)
---
 scripts/_shop.js | 2 +-
 scripts/push.js  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/scripts/_shop.js b/scripts/_shop.js
index 0f3e7f3..6155497 100644
--- a/scripts/_shop.js
+++ b/scripts/_shop.js
@@ -8,7 +8,7 @@ const fs = require('fs');
 const SECRETS_ENV = '/Users/stevestudio2/Projects/secrets-manager/.env';
 const DOMAIN = 'designer-laboratory-sandbox.myshopify.com';
 const API_VERSION = '2024-10';
-const PG = { host: '127.0.0.1', user: 'dw_admin', db: 'dw_unified', pass: 'DW2024SecurePass' };
+const PG = { host: '127.0.0.1', user: 'dw_admin', db: 'dw_unified', pass: process.env.PG_DW_ADMIN_PASSWORD || process.env.DW_ADMIN_DB_PASSWORD || '' };
 
 function getToken() {
   const env = fs.readFileSync(SECRETS_ENV, 'utf8');
diff --git a/scripts/push.js b/scripts/push.js
index a4b57a3..aeebde2 100644
--- a/scripts/push.js
+++ b/scripts/push.js
@@ -39,7 +39,7 @@ const path = require('path');
 const SECRETS_ENV = '/Users/stevestudio2/Projects/secrets-manager/.env';
 const DOMAIN = 'designer-laboratory-sandbox.myshopify.com';
 const API_VERSION = '2024-10';
-const PG = { host: '127.0.0.1', user: 'dw_admin', db: 'dw_unified', pass: 'DW2024SecurePass' };
+const PG = { host: '127.0.0.1', user: 'dw_admin', db: 'dw_unified', pass: process.env.PG_DW_ADMIN_PASSWORD || process.env.DW_ADMIN_DB_PASSWORD || '' };
 const VENDOR = 'Rebel Walls';
 const SAMPLE_PRICE = '4.25';
 const LOG_DIR = path.join(__dirname, '..', 'data');

← e01aadd launchd plist for daily staggered push (Steve pastes the loa · back to Rebel Walls Push · Add RW cadence daily step — 5 murals/day, budget-coordinated a3c8752 →