From cb9c095847ae4295a7130d3339ad4cd1f93d936f Mon Sep 17 00:00:00 2001
From: Graham McIntire <graham@mcintire.me>
Date: Mon, 5 Jan 2026 14:35:09 -0600
Subject: [PATCH] Set logger level to info in development to prevent credential
 exposure

SNMPKit library logs complete SNMP messages at debug level, which
includes the community string (credential). Setting log level to :info
prevents these debug messages from appearing in development logs.

Production and test environments already use :info and :warning levels.
---
 config/dev.exs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/config/dev.exs b/config/dev.exs
index 72be9387..73c195d1 100644
--- a/config/dev.exs
+++ b/config/dev.exs
@@ -3,6 +3,10 @@ import Config
 # Do not include metadata nor timestamps in development logs
 config :logger, :default_formatter, format: "[$level] $message\n"
 
+# Set minimum log level to info to prevent debug logs from exposing sensitive data
+# SNMPKit logs complete SNMP messages at debug level which includes community strings
+config :logger, level: :info
+
 # Initialize plugs at runtime for faster development compilation
 config :phoenix, :plug_init_mode, :runtime