# Secure Database Setup

DSH no longer stores production database credentials inside `config/db.php`.

The default private credential file is:

`/home/CPANEL_USER/dsh_private/database.php`

Copy the structure from `config/database.private.example.php`, replace the placeholders with the newly rotated database credentials, and set:

- directory permission: `0700`
- file permission: `0600`

Never place the private credential file under `public_html`, include it in a ZIP release, or share it through chat.

The path can be overridden with the `DSH_DB_CONFIG_FILE` environment variable when required by the hosting layout.

