fix(infra): purge hardcoded Postgres password from service_orchestrator.py

Replace hardcoded DATABASE_URL default (containing live password) with
required os.environ lookup. The credential must be set at runtime.

Build: N/A (Python shim)
This commit is contained in:
allaun 2026-06-28 19:58:35 -05:00
parent c44a01df3b
commit c3d7516849

View file

@ -41,10 +41,7 @@ INVALIDATION_FLOW = os.getenv(
) )
# PostgreSQL + Valkey config # PostgreSQL + Valkey config
DATABASE_URL = os.getenv( DATABASE_URL = os.environ["DATABASE_URL"]
"DATABASE_URL",
"postgresql://authentik:***REMOVED***@localhost:5432/authentik",
)
VALKEY_URL = os.getenv("VALKEY_URL", "redis://localhost:6379/0") VALKEY_URL = os.getenv("VALKEY_URL", "redis://localhost:6379/0")
# ─── domain ────────────────────────────────────────────────────────────────── # ─── domain ──────────────────────────────────────────────────────────────────