# Scratch & secrets

## Secrets (separate repo)

```
../koopa-admin-secrets/
  koopa/host-root/taler-bank/…      → /root/bank-*-password.txt
  koopa/host-root/taler-merchant/…  → /root/merchant-*-password.txt
  containers/<name>/secrets/        → files inside podman containers
```

Deploy/pull: `koopa-admin-secrets/scripts/deploy-to-koopa.sh` / `pull-from-koopa.sh`.  
No password **values** in `koopa-admin-log`.

## Scratch: `koopa-admin-log/.tmp/`

Ephemeral agent probes only (gitignored).