Skip to content

Security: replace predictable dev secrets in backend/.env.example with CHANGE_ME_* placeholders #10

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
Copilot wants to merge 2 commits into
base: master
Choose a base branch
from
Draft

Security: replace predictable dev secrets in backend/.env.example with CHANGE_ME_* placeholders #10

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
8f1e5b8
Initial plan
Copilot Apr 8, 2026
cce1603
security: replace predictable dev secrets in backend/.env.example wit…
Copilot Apr 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 6 additions & 5 deletions backend/.env.example
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,16 +11,16 @@ PORT=3001

# PostgreSQL Database (docker-compose.unified.yml)
# Default credentials match unified compose
DATABASE_URL=postgresql://datacendia:datacendia_secure_2024@localhost:5433/datacendia
DATABASE_URL=postgresql://datacendia:CHANGE_ME_POSTGRES_PASSWORD@localhost:5433/datacendia

# Redis - Docker container with password
# Matches docker-compose.unified.yml redis service
REDIS_URL=redis://:datacendia_redis_2024@localhost:6380
REDIS_URL=redis://:CHANGE_ME_REDIS_PASSWORD@localhost:6380

# Neo4j Graph Database
NEO4J_URI=bolt://localhost:7687
NEO4J_USER=neo4j
NEO4J_PASSWORD=datacendia_graph_2024
NEO4J_PASSWORD=CHANGE_ME_USE_A_STRONG_PASSWORD

# Ollama LLM — Multi-Model Architecture
OLLAMA_BASE_URL=http://127.0.0.1:11434
Expand All @@ -32,8 +32,9 @@ OLLAMA_MODEL_FAST=llama3.2:3b
OLLAMA_MODEL_VISION=qwen3-vl:30b

# JWT Secrets (generate strong random strings in production)
JWT_SECRET=datacendia-jwt-secret-change-in-production-2024
JWT_REFRESH_SECRET=datacendia-refresh-secret-change-in-production-2024
# Generate secure secrets with: openssl rand -base64 64
JWT_SECRET=CHANGE_ME_GENERATE_A_SECURE_64_CHAR_SECRET
JWT_REFRESH_SECRET=CHANGE_ME_GENERATE_ANOTHER_SECURE_SECRET
JWT_EXPIRES_IN=1h
JWT_REFRESH_EXPIRES_IN=30d

Expand Down