[fyfy18]

You may be interested to know that Heroku exposes all PostgreSQL databases publically, and unless you are an enterprise customer there is no way to turn that ‘feature’ off:

https://devcenter.heroku.com/articles/connecting-to-heroku-p...

[e12e]

Not to worry, I always set a password on the 'postgres' user. Something like: 'postgres'.