From 928468daae8c88a4e7957124549641905bd758d4 Mon Sep 17 00:00:00 2001
From: Oliver Baer <75138893+mrwind-up-bird@users.noreply.github.com>
Date: Wed, 25 Mar 2026 22:16:22 +0100
Subject: [PATCH] fix(autofix): Hardcoded credentials in seed script

---
 scripts/seed_admin.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/scripts/seed_admin.py b/scripts/seed_admin.py
index 730b43f..3fae997 100644
--- a/scripts/seed_admin.py
+++ b/scripts/seed_admin.py
@@ -1,3 +1,4 @@
+import os
 """Seed an admin user + tenant. Run inside the web container."""
 
 import asyncio
@@ -16,8 +17,8 @@ async def main():
 
         user = User(
             tenant_id=tenant.id,
-            email="oliver.baer@gmail.com",
-            password_hash=hash_password("meister12"),
+            email=os.environ.get("ADMIN_EMAIL", "admin@example.com"),
+            password_hash=hash_password(os.environ.get("ADMIN_PASSWORD", "changeme123")),
             role="admin",
         )
         session.add(user)