From ea554ebd6fcde4f360e804860609558db5d08a17 Mon Sep 17 00:00:00 2001
From: Rene Fichtmueller <renefichtmueller@MacStudio-von-Rene-8.local>
Date: Tue, 31 Mar 2026 20:36:33 +0200
Subject: [PATCH] security: remove hardcoded secrets from ecosystem.config.js,
 add example template

---
 .gitignore                                         |  2 ++
 ecosystem.config.js => ecosystem.config.example.js | 14 +++++++-------
 2 files changed, 9 insertions(+), 7 deletions(-)
 rename ecosystem.config.js => ecosystem.config.example.js (81%)

diff --git a/.gitignore b/.gitignore
index b8728dd..12768c5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,6 +5,8 @@ dist/
 .env*
 .dev.vars
 *.local
+wrangler.toml
+ecosystem.config.js
 
 # Downloaded product assets (images, PDFs)
 assets/images/
diff --git a/ecosystem.config.js b/ecosystem.config.example.js
similarity index 81%
rename from ecosystem.config.js
rename to ecosystem.config.example.js
index a4ab7db..03d2ddb 100644
--- a/ecosystem.config.js
+++ b/ecosystem.config.example.js
@@ -14,8 +14,8 @@ module.exports = {
         POSTGRES_PORT: "5433",
         POSTGRES_DB: "transceiver_db",
         POSTGRES_USER: "tip",
-        POSTGRES_PASSWORD: "***REDACTED***",
-        OLLAMA_URL: "http://192.168.178.213:11434",
+        POSTGRES_PASSWORD: "CHANGE_ME",
+        OLLAMA_URL: "http://YOUR_OLLAMA_HOST:11434",
         QDRANT_URL: "http://localhost:6333",
         DOCLING_URL: "http://localhost:8100",
       },
@@ -33,15 +33,15 @@ module.exports = {
       env: {
         NODE_ENV: "production",
         MCP_HTTP_PORT: "3202",
-        MCP_SECRET: "tip-mcp-2026-prod",
+        MCP_SECRET: "CHANGE_ME",
         POSTGRES_HOST: "localhost",
         POSTGRES_PORT: "5433",
         POSTGRES_DB: "transceiver_db",
         POSTGRES_USER: "tip",
-        POSTGRES_PASSWORD: "***REDACTED***",
+        POSTGRES_PASSWORD: "CHANGE_ME",
         QDRANT_URL: "http://localhost:6333",
-        OLLAMA_URL: "http://192.168.178.213:11434",
-        CORS_ORIGINS: "https://eo-global-pulse.context-x.org,https://switchblade.context-x.org",
+        OLLAMA_URL: "http://YOUR_OLLAMA_HOST:11434",
+        CORS_ORIGINS: "https://your-domain.example.com",
       },
       max_memory_restart: "300M",
       instances: 1,
@@ -60,7 +60,7 @@ module.exports = {
         POSTGRES_PORT: "5433",
         POSTGRES_DB: "transceiver_db",
         POSTGRES_USER: "tip",
-        POSTGRES_PASSWORD: "***REDACTED***",
+        POSTGRES_PASSWORD: "CHANGE_ME",
       },
       max_memory_restart: "1G",
       instances: 1,