ilia/punimtag
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Scrub docs/scripts of example passwords and host paths.
CI / skip-ci-check (pull_request) Successful in 30s
Details
CI / docker-ci (pull_request) Successful in 32s
Details
CI / python-lint (pull_request) Successful in 32s
Details
CI / secret-scan (pull_request) Successful in 39s
Details
CI / viewer-unit (pull_request) Successful in 2m21s
Details
CI / admin-unit (pull_request) Successful in 2m43s
Details
CI / e2e (pull_request) Successful in 3m22s
Details

Browse Source 
Stop shipping punimtag_password / admin defaults in install helpers and
docs; generate secrets at install time; require ADMIN_PASSWORD from env
(with test-only bootstrap in conftest).
This commit is contained in:
ilia
2026-08-05 12:28:56 -04:00
parent 7ac3284e4e
commit cb9e927ad9
25 changed files with 133 additions and 96 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+9 -7
View File
@@ -122,7 +122,7 @@ For development, you can use the shared development PostgreSQL server:
**Dev PostgreSQL Server:**
- **Host**: `<db-host>`
- **Port**: 5432
- **User**: ladmin
- **User**: `<db-user>`
- **Password**: [Contact administrator for password]
**Development Server:**
@@ -133,10 +133,10 @@ For development, you can use the shared development PostgreSQL server:
Configure your `.env` file for development:
```bash
# Main database (dev)
DATABASE_URL=postgresql+psycopg2://ladmin:[PASSWORD]@<db-host>:5432/punimtag
DATABASE_URL=postgresql+psycopg2://<db-user>:[PASSWORD]@<db-host>:5432/punimtag
# Auth database (dev)
DATABASE_URL_AUTH=postgresql+psycopg2://ladmin:[PASSWORD]@<db-host>:5432/punimtag_auth
DATABASE_URL_AUTH=postgresql+psycopg2://<db-user>:[PASSWORD]@<db-host>:5432/punimtag_auth
```
**Install PostgreSQL (if not installed):**
@@ -201,10 +201,10 @@ DATABASE_URL_AUTH=postgresql+psycopg2://punimtag:<choose-a-password>@localhost:5
**Development Server:**
```bash
# Main database (dev PostgreSQL server)
DATABASE_URL=postgresql+psycopg2://ladmin:[PASSWORD]@<db-host>:5432/punimtag
DATABASE_URL=postgresql+psycopg2://<db-user>:[PASSWORD]@<db-host>:5432/punimtag
# Auth database (dev PostgreSQL server)
DATABASE_URL_AUTH=postgresql+psycopg2://ladmin:[PASSWORD]@<db-host>:5432/punimtag_auth
DATABASE_URL_AUTH=postgresql+psycopg2://<db-user>:[PASSWORD]@<db-host>:5432/punimtag_auth
```
**Automatic Initialization:**
@@ -250,7 +250,7 @@ The separate auth database (`punimtag_auth`) stores frontend website user accoun
# On macOS with Homebrew:
brew install redis
brew services start redis
1
# Verify Redis is running:
redis-cli ping # Should respond with "PONG"
```
@@ -771,6 +771,8 @@ npx prisma generate
**Note**: Set strong values for `ADMIN_USERNAME`, `ADMIN_PASSWORD`, and `SECRET_KEY` before deploying.
**History:** Older commits may still contain LAN IPs or example passwords in docs. Treat those as compromised for any real credentials that matched; rotate DB/admin passwords if they were ever used outside localhost. Prefer placeholders (`<db-host>`, `<choose-a-password>`) in all public docs.
---
## Known Limitations
@@ -822,7 +824,7 @@ The project includes scripts for deploying to the development server.
**Development Database:**
- **Host**: `<db-host>`
- **Port**: 5432
- **User**: ladmin
- **User**: `<db-user>`
- **Password**: [Contact administrator for password]
#### Build and Deploy to Dev