fix: remove all default credentials (#2)
- Gateway: admin user seeded from ADMIN_USERNAME/ADMIN_PASSWORD env vars
(no more hardcoded admin/admin). Warns if not set.
- Trips: USERNAME/PASSWORD env vars no longer default to admin/admin.
Warns if not set.
- Fitness: user seed requires USER{n}_USERNAME/PASSWORD env vars.
No more "changeme" fallback. Skips seed if not set.
- /api/auth/register remains disabled (403)
Closes #2
This commit is contained in:
@@ -38,8 +38,10 @@ PORT = int(os.environ.get("PORT", 8086))
|
||||
DATA_DIR = Path(os.environ.get("DATA_DIR", "/app/data"))
|
||||
DB_PATH = DATA_DIR / "trips.db"
|
||||
IMAGES_DIR = DATA_DIR / "images"
|
||||
USERNAME = os.environ.get("USERNAME", "admin")
|
||||
PASSWORD = os.environ.get("PASSWORD", "admin")
|
||||
USERNAME = os.environ.get("USERNAME", "")
|
||||
PASSWORD = os.environ.get("PASSWORD", "")
|
||||
if not USERNAME or not PASSWORD:
|
||||
print("[Trips] WARNING: USERNAME and PASSWORD env vars not set. Login will not work.", flush=True)
|
||||
GOOGLE_API_KEY = os.environ.get("GOOGLE_API_KEY", "")
|
||||
GOOGLE_CX = os.environ.get("GOOGLE_CX", "")
|
||||
OPENAI_API_KEY = os.environ.get("OPENAI_API_KEY", "")
|
||||
|
||||
Reference in New Issue
Block a user