hotswap/delphi-database
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security(p0): set strong ADMIN_PASSWORD in .env and sync DB admin hash; remove hardcoded 'admin123' in example; update TODO

Browse Source
This commit is contained in:
HotSwapp
2025-08-17 22:32:02 -05:00
parent e93b6db64a
commit 321b0085c6
2 changed files with 269 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
TODO.md
View File

@@ -9,7 +9,7 @@
### **Remove Hardcoded Credentials**
- [x] **URGENT**: Remove `.env` file from git repository
- [x] **URGENT**: Generate new SECRET_KEY (32+ character random string)
- [ ] **URGENT**: Change default admin password from `admin123` to secure password
- [x] **URGENT**: Change default admin password from `admin123` to secure password
- [ ] **URGENT**: Implement proper environment variable management
- [ ] **URGENT**: Add `.env` to `.gitignore` and commit
- [ ] **URGENT**: Document secret rotation procedures