# Secrets — not stored in admin-log

Live on koopa (`hernani`):

```
~/koopa-paivana/secrets/merchant-access-token   # secret-token:<goa-shop password>
~/koopa-paivana/secrets/paivana-secret          # openssl rand -hex 32
```

Mode: world-readable to the container user is required under rootless podman
(`chmod 644` is fine; directory stays under hernani home).

Optional mirror under `koopa-admin-secrets/koopa/home-hernani/koopa-paivana/secrets/`.