Security: remove hardcoded credentials, require DB_PASSWORD, delete .bak file, warn on secrets template

2026-07-17 14:24:48 -05:00
parent 9286f3e323
commit 288767f6c0
4 changed files with 7 additions and 1282 deletions
@@ -11,7 +11,11 @@ const pool = new Pool({
  port: 5432,
  database: 'lahuasca',
  user: 'lahuasca',
-  password: process.env.DB_PASSWORD || 'lahuasca123',
+  password: (() => {
+    const p = process.env.DB_PASSWORD;
+    if (!p) throw new Error('DB_PASSWORD env var is required');
+    return p;
+  })(),
 });

 async function convertToWebP(base64Data) {