koopa-admin-log/ops/ROOT_HYGIENE.md

17 lines
506 B
Markdown

# Scratch & secrets
## Secrets (separate repo)
```
../koopa-admin-secrets/
koopa/host-root/taler-bank/… → /root/bank-*-password.txt
koopa/host-root/taler-merchant/… → /root/merchant-*-password.txt
containers/<name>/secrets/ → files inside podman containers
```
Deploy/pull: `koopa-admin-secrets/scripts/deploy-to-koopa.sh` / `pull-from-koopa.sh`.
No password **values** in `koopa-admin-log`.
## Scratch: `koopa-admin-log/.tmp/`
Ephemeral agent probes only (gitignored).