From b2cdfce4cd1ac08cb0fabede305e6df97895495f Mon Sep 17 00:00:00 2001
From: cryptorugmunch <admin@rugmunch.io>
Date: Thu, 2 Jul 2026 22:37:41 +0200
Subject: [PATCH] security(status_page): remove hardcoded ClickHouse password
 fallback

---
 app/routers/status_page.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/routers/status_page.py b/app/routers/status_page.py
index 8f4de85..6ef1e9b 100644
--- a/app/routers/status_page.py
+++ b/app/routers/status_page.py
@@ -120,7 +120,7 @@ def check_clickhouse() -> dict[str, Any]:
     try:
         ch_host = os.getenv("CH_HOST", "langfuse-clickhouse-1")
         ch_user = os.getenv("CH_USER", "clickhouse")
-        ch_password = os.getenv("CH_PASSWORD", "REDACTED")
+        ch_password = os.getenv("CH_PASSWORD", "change-me-in-env")
 
         client = clickhouse_connect.get_client(
             host=ch_host,