From b9a93566ad2a831fb5fff3220aeebd47ad2e1a0b Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 10 Apr 2026 20:33:17 +0000
Subject: [PATCH] security: remove hardcoded password fallbacks and add
 .env.example

Agent-Logs-Url: https://github.com/marcabru-tech/DataBank-Site/sessions/d71df034-ecda-4084-a4fb-6762fea7eb08

Co-authored-by: marcabru-tech <176715578+marcabru-tech@users.noreply.github.com>
---
 .env.example       | 1 +
 docker-compose.yml | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)
 create mode 100644 .env.example

diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..0aabe5b
--- /dev/null
+++ b/.env.example
@@ -0,0 +1 @@
+POSTGRES_PASSWORD=databank
diff --git a/docker-compose.yml b/docker-compose.yml
index 677b849..39e148a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -6,7 +6,7 @@ services:
     environment:
       POSTGRES_DB: databank
       POSTGRES_USER: databank
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-databank}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
     ports:
       - "5432:5432"
     volumes:
@@ -25,7 +25,7 @@ services:
       db:
         condition: service_healthy
     environment:
-      - DATABASE_URL=postgresql://databank:${POSTGRES_PASSWORD:-databank}@db:5432/databank
+      - DATABASE_URL=postgresql://databank:${POSTGRES_PASSWORD}@db:5432/databank
       - LOG_LEVEL=info
       - PERSIST_LEADS=false