From c3d75168496960fefb92ee34ebf0b94123454876 Mon Sep 17 00:00:00 2001 From: allaun Date: Sun, 28 Jun 2026 19:58:35 -0500 Subject: [PATCH] fix(infra): purge hardcoded Postgres password from service_orchestrator.py Replace hardcoded DATABASE_URL default (containing live password) with required os.environ lookup. The credential must be set at runtime. Build: N/A (Python shim) --- .../infra/service-orchestrator/service_orchestrator.py | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/4-Infrastructure/infra/service-orchestrator/service_orchestrator.py b/4-Infrastructure/infra/service-orchestrator/service_orchestrator.py index a45d1a77..33c9bcd1 100644 --- a/4-Infrastructure/infra/service-orchestrator/service_orchestrator.py +++ b/4-Infrastructure/infra/service-orchestrator/service_orchestrator.py @@ -41,10 +41,7 @@ INVALIDATION_FLOW = os.getenv( ) # PostgreSQL + Valkey config -DATABASE_URL = os.getenv( - "DATABASE_URL", - "postgresql://authentik:***REMOVED***@localhost:5432/authentik", -) +DATABASE_URL = os.environ["DATABASE_URL"] VALKEY_URL = os.getenv("VALKEY_URL", "redis://localhost:6379/0") # ─── domain ──────────────────────────────────────────────────────────────────