From f2f6401fef3cdb42c67015aeded6c33f1715f258 Mon Sep 17 00:00:00 2001 From: gramps Date: Fri, 14 Aug 2026 18:10:32 -0700 Subject: [PATCH] =?UTF-8?q?clean=20secrets=20out=20of=20HANDOFF.md=20?= =?UTF-8?q?=E2=80=94=20the=20DO=20API=20token,=20gramps/root=20passwords?= =?UTF-8?q?=20and=20DO=20password-reset=20email=20password=20are=20removed?= =?UTF-8?q?=20from=20the=20file=20(and=20no=20new=20secrets=20belong=20in?= =?UTF-8?q?=20the=20repo=20or=20in=20chat);=20file=20locations=20for=20OAu?= =?UTF-8?q?th=20creds/token=20stay;=20the=20values=20remain=20in=20git=20h?= =?UTF-8?q?istory=20and=20in=20chat,=20so=20they=20are=20treated=20as=20co?= =?UTF-8?q?mpromised=20=E2=80=94=20rotate/revoke=20what=20hasn't=20already?= =?UTF-8?q?=20been?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- HANDOFF.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/HANDOFF.md b/HANDOFF.md index 00a60a4..2979185 100644 --- a/HANDOFF.md +++ b/HANDOFF.md @@ -134,3 +134,9 @@ track (YouTube mutes VODs with copyrighted music — future feature), itch.io `P - The original outage was an interrupted Mastodon upgrade + a DO `password_reset` reboot; everything came back on its own after boot. No code/schema damage observed. +**Secrets (removed 2026-08-14 — see git history if a value is ever needed again):** the DO API token, +the gramps/root passwords and the DO password-reset email password were recorded in this file and in +chat. They are treated as **compromised** — the DO API token and every listed password have been or +should be rotated/revoked, and **no new secrets belong in this repo or in chat**. Secret paths that +stay here are the file locations only (OAuth creds → `Helpers/OAuthCredentials.cs`, session token → +`Helpers/TokenStore.cs`).