security: remove hardcoded secrets from ecosystem.config.js, add example template

.gitignore

@@ -5,6 +5,8 @@ dist/
 .env*
 .dev.vars
 *.local
+wrangler.toml
+ecosystem.config.js
 
 # Downloaded product assets (images, PDFs)
 assets/images/

ecosystem.config.example.js

@@ -14,8 +14,8 @@ module.exports = {
         POSTGRES_PORT: "5433",
         POSTGRES_DB: "transceiver_db",
         POSTGRES_USER: "tip",
-        POSTGRES_PASSWORD: "tip_prod_2026",
-        OLLAMA_URL: "http://192.168.178.213:11434",
+        POSTGRES_PASSWORD: "CHANGE_ME",
+        OLLAMA_URL: "http://YOUR_OLLAMA_HOST:11434",
         QDRANT_URL: "http://localhost:6333",
         DOCLING_URL: "http://localhost:8100",
       },
@@ -33,15 +33,15 @@ module.exports = {
       env: {
         NODE_ENV: "production",
         MCP_HTTP_PORT: "3202",
-        MCP_SECRET: "tip-mcp-2026-prod",
+        MCP_SECRET: "CHANGE_ME",
         POSTGRES_HOST: "localhost",
         POSTGRES_PORT: "5433",
         POSTGRES_DB: "transceiver_db",
         POSTGRES_USER: "tip",
-        POSTGRES_PASSWORD: "tip_prod_2026",
+        POSTGRES_PASSWORD: "CHANGE_ME",
         QDRANT_URL: "http://localhost:6333",
-        OLLAMA_URL: "http://192.168.178.213:11434",
-        CORS_ORIGINS: "https://eo-global-pulse.context-x.org,https://switchblade.context-x.org",
+        OLLAMA_URL: "http://YOUR_OLLAMA_HOST:11434",
+        CORS_ORIGINS: "https://your-domain.example.com",
       },
       max_memory_restart: "300M",
       instances: 1,
@@ -60,7 +60,7 @@ module.exports = {
         POSTGRES_PORT: "5433",
         POSTGRES_DB: "transceiver_db",
         POSTGRES_USER: "tip",
-        POSTGRES_PASSWORD: "tip_prod_2026",
+        POSTGRES_PASSWORD: "CHANGE_ME",
       },
       max_memory_restart: "1G",
       instances: 1,

packages/api/src/routes/blog.ts

@@ -912,8 +912,8 @@ async function processLlmQueue(): Promise<void> {
     }
   }
   llmRunning = false;
-  // Process next item
-  if (llmQueue.length > 0) processLlmQueue();
+  // Process next item — small delay between pipelines to avoid nginx rate-limit bursts
+  if (llmQueue.length > 0) setTimeout(() => processLlmQueue(), 3000);
 }
 
 /** Run 10-Step Flexoptix Style LLM Pipeline and update draft in-place */