From 824ed41a14b68c2621c8d40fd659ca0d865ff7a1 Mon Sep 17 00:00:00 2001
From: Tetardtek <kvnn64@gmail.com>
Date: Tue, 17 Mar 2026 07:26:53 +0100
Subject: [PATCH] =?UTF-8?q?fix(security):=20revert=20synchronize:true=20?=
 =?UTF-8?q?=E2=86=92=20prod-safe=20+=20.env.example=20placeholders?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .env.example      | 4 ++--
 src/app.module.ts | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.env.example b/.env.example
index 0b0bd76..d8ab4ea 100644
--- a/.env.example
+++ b/.env.example
@@ -12,11 +12,11 @@ FRONTEND_URL=http://localhost:5173
 
 # SuperOAuth — service externe d'authentification
 SUPER_OAUTH_URL=http://localhost:3000
-SUPER_OAUTH_JWT_SECRET=
+SUPER_OAUTH_JWT_SECRET=<JWT secret SuperOAuth>
 
 # Cookie signing
 COOKIE_SECRET=
 
 # Twitch EventSub webhook
-TWITCH_WEBHOOK_SECRET=<secret EventSub>
+TWITCH_WEBHOOK_SECRET=<secret EventSub Twitch>
 TWITCH_CLIENT_ID=<app client id>
diff --git a/src/app.module.ts b/src/app.module.ts
index 87c1d56..6d72e0f 100644
--- a/src/app.module.ts
+++ b/src/app.module.ts
@@ -25,7 +25,7 @@ import { HealthController } from './common/health.controller';
         type: 'mysql',
         url: config.get<string>('DATABASE_URL'),
         autoLoadEntities: true,
-        synchronize: true, // first deploy only — revert after tables created
+        synchronize: config.get('NODE_ENV') !== 'production',
         logging: config.get('NODE_ENV') === 'development',
       }),
     }),