gramps/ytLlive
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

clean secrets out of HANDOFF.md — the DO API token, gramps/root passwords and DO password-reset email password are removed from the file (and no new secrets belong in the repo or in chat); file locations for OAuth creds/token stay; the values remain in git history and in chat, so they are treated as compromised — rotate/revoke what hasn't already been

Browse Source
This commit is contained in:
Llama Chile Shop
2026-08-14 18:10:32 -07:00
parent 6d71acef8c
commit f2f6401fef
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
HANDOFF.md
+6
View File
@@ -134,3 +134,9 @@ track (YouTube mutes VODs with copyrighted music — future feature), itch.io `P
- The original outage was an interrupted Mastodon upgrade + a DO `password_reset` reboot; everything
came back on its own after boot. No code/schema damage observed.
**Secrets (removed 2026-08-14 — see git history if a value is ever needed again):** the DO API token,
the gramps/root passwords and the DO password-reset email password were recorded in this file and in
chat. They are treated as **compromised** — the DO API token and every listed password have been or
should be rotated/revoked, and **no new secrets belong in this repo or in chat**. Secret paths that
stay here are the file locations only (OAuth creds → `Helpers/OAuthCredentials.cs`, session token →
`Helpers/TokenStore.cs`).