From 8cc0042d0e5a8fa5cbee5150f707a88191ba2549 Mon Sep 17 00:00:00 2001
From: svemagie <869694+svemagie@users.noreply.github.com>
Date: Sat, 7 Mar 2026 17:23:20 +0100
Subject: [PATCH] security: replace hardcoded admin password with env var
 INDIEKIT_PASSWORD

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 indiekit.config.mjs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/indiekit.config.mjs b/indiekit.config.mjs
index d4477c5..cc2262e 100644
--- a/indiekit.config.mjs
+++ b/indiekit.config.mjs
@@ -6,7 +6,7 @@ export default {
     name: "Indiekit",
     admin: {
       username: "admin@blog.giersig.eu",
-      password: "accus3D!23"
+      password: process.env.INDIEKIT_PASSWORD
     }
   },
   "@indiekit/endpoint-auth": {