Files
julien 6acc16c0b9 security(env): remove credentials from nodemon.json
All secrets (DB passwords, API keys, JWT secret) are now sourced
exclusively from config/env/.env.local, which is gitignored.
Nodemon only sets APP_ENV=local so that app.js's dotenv loader
picks up the right env file at boot.

Note: the previously committed values are still in git history.
They must be rotated out-of-band (rotation list tracked separately).
2026-04-25 17:36:06 +02:00

6 lines
50 B
JSON

{
"env": {
"APP_ENV": "local"
}
}