From f9e2e5509eb2f1deca15c8ca2518d2ccfadc2f65 Mon Sep 17 00:00:00 2001
From: Ahmed Bakr Ali <119736744+aborayan2022@users.noreply.github.com>
Date: Thu, 2 Apr 2026 21:22:30 +0200
Subject: [PATCH 1/5] Clear GOOGLE_API_KEY in .env.example

Remove sensitive GOOGLE_API_KEY from example file
---
 .env.example | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.env.example b/.env.example
index 8a382eb..c346b96 100644
--- a/.env.example
+++ b/.env.example
@@ -21,7 +21,7 @@ OPENROUTER_MODEL=nvidia/nemotron-3-super-120b-a12b:free
 OPENROUTER_BASE_URL=https://openrouter.ai/api/v1/chat/completions
 
 # Google Generative AI (fallback provider)
-GOOGLE_API_KEY=AIzaSyAKUp_qGpJPFMaDxIe6x3PjV4ghRTQuZ3Q
+GOOGLE_API_KEY=
 GOOGLE_MODEL=chat-bison-001
 
 # Premium document translation (recommended for Translate PDF)

From af6c13c5f16c99027a9c366e43b0b7a8068651a1 Mon Sep 17 00:00:00 2001
From: Ahmed Bakr Ali <119736744+aborayan2022@users.noreply.github.com>
Date: Thu, 2 Apr 2026 21:23:11 +0200
Subject: [PATCH 2/5] Remove hardcoded PostgreSQL password from .env.example

Removed the hardcoded PostgreSQL password from the example file.
---
 .env.example | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.env.example b/.env.example
index c346b96..93f0835 100644
--- a/.env.example
+++ b/.env.example
@@ -69,7 +69,7 @@ SENTRY_ENVIRONMENT=production
 DATABASE_URL=postgresql://dociva:${POSTGRES_PASSWORD}@postgres:5432/dociva
 POSTGRES_DB=dociva
 POSTGRES_USER=dociva
-POSTGRES_PASSWORD=6x3PjV4ghRTQuZ3Q
+POSTGRES_PASSWORD=
 
 # Frontend
 VITE_SITE_DOMAIN=https://dociva.io

From e869ef611095f79d6e51381f16c7879616d0bb71 Mon Sep 17 00:00:00 2001
From: Ahmed Bakr Ali <119736744+aborayan2022@users.noreply.github.com>
Date: Thu, 2 Apr 2026 21:26:10 +0200
Subject: [PATCH 3/5] Set placeholder for GOOGLE_API_KEY

Updated GOOGLE_API_KEY placeholder in .env.example
---
 .env.example | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.env.example b/.env.example
index 93f0835..1ebfc49 100644
--- a/.env.example
+++ b/.env.example
@@ -21,7 +21,7 @@ OPENROUTER_MODEL=nvidia/nemotron-3-super-120b-a12b:free
 OPENROUTER_BASE_URL=https://openrouter.ai/api/v1/chat/completions
 
 # Google Generative AI (fallback provider)
-GOOGLE_API_KEY=
+GOOGLE_API_KEY=your-google-api-key-here
 GOOGLE_MODEL=chat-bison-001
 
 # Premium document translation (recommended for Translate PDF)

From fde60163cb2253720013a54e1f6718002000d218 Mon Sep 17 00:00:00 2001
From: Ahmed Bakr Ali <119736744+aborayan2022@users.noreply.github.com>
Date: Thu, 2 Apr 2026 21:27:53 +0200
Subject: [PATCH 4/5] Change default PostgreSQL password to a placeholder

Updated the default PostgreSQL password in docker-compose.
---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index c734251..7f7af42 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -20,7 +20,7 @@ services:
     environment:
       - POSTGRES_DB=dociva
       - POSTGRES_USER=dociva
-      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-6x3PjV4ghRTQuZ3Q}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-your-secure-password-here}
     volumes:
       - postgres_data:/var/lib/postgresql/data
     healthcheck:

From 5ecaaf86baca4ab99f780eb8ad794e4ed169662e Mon Sep 17 00:00:00 2001
From: Ahmed Bakr Ali <119736744+aborayan2022@users.noreply.github.com>
Date: Thu, 2 Apr 2026 21:28:45 +0200
Subject: [PATCH 5/5] Change default PostgreSQL password for development

---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 7f7af42..680bcca 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -20,7 +20,7 @@ services:
     environment:
       - POSTGRES_DB=dociva
       - POSTGRES_USER=dociva
-      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-your-secure-password-here}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-dev-only-password-12345}
     volumes:
       - postgres_data:/var/lib/postgresql/data
     healthcheck: