koopa-admin-log/ops/ROOT_HYGIENE.md

Scratch & secrets

Secrets (separate repo)

../koopa-admin-secrets/
  koopa/host-root/taler-bank/…      → /root/bank-*-password.txt
  koopa/host-root/taler-merchant/…  → /root/merchant-*-password.txt
  containers/<name>/secrets/        → files inside podman containers

Deploy/pull: koopa-admin-secrets/scripts/deploy-to-koopa.sh / pull-from-koopa.sh.
No password values in koopa-admin-log.

Scratch: koopa-admin-log/.tmp/

Ephemeral agent probes only (gitignored).