From 7cca8342b585703f14ea74a22ee0baedfd5b1562 Mon Sep 17 00:00:00 2001
From: Lizandro Guarnizo <77708265+lizandrogd@users.noreply.github.com>
Date: Wed, 11 Mar 2026 21:16:52 -0500
Subject: [PATCH] =?UTF-8?q?refactor:=20unify=20env=20vars=20=E2=80=94=20no?=
 =?UTF-8?q?=20hardcoded=20credentials,=20LOG=5FLEVEL/SESSION=20from=20env?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 config/config.php       | 16 ++++++++--------
 docker-compose.dev.yml  | 10 +++++-----
 docker-compose.prod.yml |  2 +-
 3 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/config/config.php b/config/config.php
index eeff926..30518cd 100644
--- a/config/config.php
+++ b/config/config.php
@@ -5,12 +5,12 @@
  * Fecha: 4 de enero de 2026 - Sistema de autenticación unificado
  */
 
-// Configuración de la base de datos - usa variables de entorno si están disponibles
-define('DB_HOST', getenv('DB_HOST') ?: '77.37.126.126');
+// Configuración de la base de datos - 100% desde variables de entorno (o .env)
+define('DB_HOST', getenv('DB_HOST') ?: 'mysql');
 define('DB_PORT', getenv('DB_PORT') ?: '3306');
 define('DB_NAME', getenv('DB_NAME') ?: 'usite_whatsapp_bot');
 define('DB_USER', getenv('DB_USER') ?: 'usite_whatsapp_user');
-define('DB_PASS', getenv('DB_PASS') ?: '6q!Vio0fn@PFmsLyHjH5');
+define('DB_PASS', getenv('DB_PASS') ?: '');
 define('DB_CHARSET', 'utf8mb4');
 
 // Configuración de autenticación (LEGACY - migrado a BD)
@@ -392,13 +392,13 @@ define('INSTALLATION_LOCK', '.installation_completed'); // Archivo de bloqueo
 define('SECRET_KEY', 'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855');
 define('ADMIN_USERNAME', 'admin'); // Usuario administrador por defecto
 // ADMIN_PASSWORD movido arriba como parte del sistema unificado (línea 18)
-define('SESSION_TIMEOUT', 1800); // 30 minutos
-define('MAX_LOGIN_ATTEMPTS', 3); // Intentos máximos de login
-define('LOGIN_LOCKOUT_TIME', 900); // 15 minutos de bloqueo tras fallos
+define('SESSION_TIMEOUT', (int)(getenv('SESSION_TIMEOUT') ?: 1800)); // 30 minutos
+define('MAX_LOGIN_ATTEMPTS', (int)(getenv('MAX_LOGIN_ATTEMPTS') ?: 3));
+define('LOGIN_LOCKOUT_TIME', (int)(getenv('LOGIN_LOCKOUT_TIME') ?: 900)); // 15 minutos
 
-// Configuración de logs
+// Configuración de logs (LOG_LEVEL sobreescribible desde env)
 define('ENABLE_LOGGING', true);
-define('LOG_LEVEL', 'INFO'); // DEBUG, INFO, WARNING, ERROR
+define('LOG_LEVEL', getenv('LOG_LEVEL') ?: 'INFO'); // DEBUG, INFO, WARNING, ERROR
 define('LOG_FILE', 'logs/system.log');
 
 // Configuración de archivos
diff --git a/docker-compose.dev.yml b/docker-compose.dev.yml
index 79e7261..d5d2d3d 100644
--- a/docker-compose.dev.yml
+++ b/docker-compose.dev.yml
@@ -13,7 +13,7 @@ services:
       MARIADB_ROOT_PASSWORD: ${DB_ROOT_PASSWORD:-root_password_2026}
       MARIADB_DATABASE: ${DB_NAME:-usite_whatsapp_bot}
       MARIADB_USER: ${DB_USER:-usite_whatsapp_user}
-      MARIADB_PASSWORD: ${DB_PASS:-6q!Vio0fn@PFmsLyHjH5}
+      MARIADB_PASSWORD: ${DB_PASS}
       TZ: America/Bogota
     volumes:
       - mysql-dev-data:/var/lib/mysql
@@ -66,7 +66,7 @@ services:
       - DB_PORT=${DB_PORT:-3306}
       - DB_NAME=${DB_NAME:-usite_whatsapp_bot}
       - DB_USER=${DB_USER:-usite_whatsapp_user}
-      - DB_PASS=${DB_PASS:-6q!Vio0fn@PFmsLyHjH5}
+      - DB_PASS=${DB_PASS}
       
       # Redis
       - REDIS_HOST=redis
@@ -150,11 +150,11 @@ services:
       - DB_PORT=${DB_PORT:-3306}
       - DB_NAME=${DB_NAME:-usite_whatsapp_bot}
       - DB_USER=${DB_USER:-usite_whatsapp_user}
-      - DB_PASS=${DB_PASS:-6q!Vio0fn@PFmsLyHjH5}
+      - DB_PASS=${DB_PASS}
       - REDIS_HOST=redis
       - REDIS_PORT=6379
       - REDIS_PASSWORD=${REDIS_PASSWORD:-}
-      - LOG_LEVEL=DEBUG
+      - LOG_LEVEL=${LOG_LEVEL:-DEBUG}
       - XDEBUG_MODE=debug
       - XDEBUG_CONFIG=client_host=host.docker.internal client_port=9003
     depends_on:
@@ -249,7 +249,7 @@ services:
       - DB_HOST=mysql
       - DB_NAME=${DB_NAME:-usite_whatsapp_bot}
       - DB_USER=${DB_USER:-usite_whatsapp_user}
-      - DB_PASS=${DB_PASS:-6q!Vio0fn@PFmsLyHjH5}
+      - DB_PASS=${DB_PASS}
       - REDIS_HOST=redis
       - REDIS_PORT=6379
       - APP_URL=http://app/health.php
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 70643ed..d63eb9f 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -31,7 +31,7 @@ services:
       - DB_PORT=${DB_PORT:-3306}
       - DB_NAME=${DB_NAME:-usite_whatsapp_bot}
       - DB_USER=${DB_USER:-usite_whatsapp_user}
-      - DB_PASS=${DB_PASS:-6q!Vio0fn@PFmsLyHjH5}
+      - DB_PASS=${DB_PASS}
       
       # Redis
       - REDIS_HOST=redis