chore(security): убрать sshkey.txt из репозитория (#391)
sshkey.txt содержит открытым текстом GHCR-PAT, пароли БД, ADMIN_TOKEN, пароль Obsidian. git rm --cached снимает файл с отслеживания (локальная копия остаётся) + добавлен в .gitignore. Частично закрывает #391. Остаётся (требует ручных действий): - ротация всех засвеченных секретов; - чистка истории git (filter-repo) — секреты остаются в старых коммитах.
This commit is contained in:
parent
3b2850b91b
commit
6f372402be
2 changed files with 2 additions and 104 deletions
2
.gitignore
vendored
2
.gitignore
vendored
|
|
@ -27,6 +27,8 @@ frontend/.sentryclirc
|
|||
.env.*.local
|
||||
.env.runtime
|
||||
.mcp.json
|
||||
# креды-заметки — НЕ коммитить (см. issue #391)
|
||||
sshkey.txt
|
||||
|
||||
# IDE
|
||||
.vscode/
|
||||
|
|
|
|||
104
sshkey.txt
104
sshkey.txt
|
|
@ -1,104 +0,0 @@
|
|||
Your identification has been saved in C:\Users\user\.ssh\gendesign_deploy
|
||||
Your public key has been saved in C:\Users\user\.ssh\gendesign_deploy.pub
|
||||
The key fingerprint is:
|
||||
SHA256:50HjJLdk9XaRDRjvKIB9LrRoux6KojXQZvgqLm7LEks gendesign-deploy
|
||||
The key's randomart image is:
|
||||
+--[ED25519 256]--+
|
||||
| oo.oo|
|
||||
| o ..o .o|
|
||||
| . = O + .|
|
||||
| o o & o + . |
|
||||
|o + o S B . . |
|
||||
|.E . . + o |
|
||||
|.o+ o . |
|
||||
|B+ o . o |
|
||||
|@*o ..o |
|
||||
+----[SHA256]-----+
|
||||
|
||||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPGKuThuQMPdjxdA9FXHkUZUO+iyVbSMOxy3qFbOY7+K gendesign-deploy
|
||||
|
||||
mYsNNJf%6hpN
|
||||
|
||||
`gendesign' 12345 ssh gendesign
|
||||
|
||||
for github
|
||||
Generating public/private ed25519 key pair.
|
||||
Your identification has been saved in /home/gendesign/.ssh/github_deploy
|
||||
Your public key has been saved in /home/gendesign/.ssh/github_deploy.pub
|
||||
The key fingerprint is:
|
||||
SHA256:W9Ioi7A/d+LxIghIOoF4rGurbEnIHuVjDtfF1Ki+C1o gendesign-server-deploy-key
|
||||
The key's randomart image is:
|
||||
+--[ED25519 256]--+
|
||||
| o |
|
||||
| o . |
|
||||
|o. + |
|
||||
|+.o. . o o |
|
||||
|*++ o o S o |
|
||||
|B= B + o + |
|
||||
|o+OEo + . |
|
||||
|o=+o+.+o. |
|
||||
|=+. .*o+. |
|
||||
+----[SHA256]-----+
|
||||
|
||||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPYYAH7vPN/b0npfH1IrhADdE+SwJsmo8gJm84VauM4m gendesign-server-deploy-key
|
||||
|
||||
pg pass 2J2SBPMKuS998fiwhtQqDhMI
|
||||
|
||||
ssh -i $HOME\.ssh\gendesign_deploy gendesign@46.173.16.127
|
||||
|
||||
pat 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
|
||||
|
||||
echo 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| docker login ghcr.io -u lekss361 --password-stdin
|
||||
|
||||
ssh -N -L 15432:localhost:5432 gendesign
|
||||
Host: localhost
|
||||
Port: 15432
|
||||
Database: gendesign
|
||||
Username: gendesign
|
||||
Password: 2J2SBPMKuS998fiwhtQqDhMI
|
||||
|
||||
Локально установить pre-commit один раз:
|
||||
make pre-commit-install
|
||||
# или:
|
||||
pip install pre-commit
|
||||
pre-commit install
|
||||
|
||||
python -m pre_commit install
|
||||
|
||||
python -m pre_commit run --all-files
|
||||
# или, если PATH добавлен:
|
||||
pre-commit run --all-files
|
||||
|
||||
Только текущая сессия:
|
||||
|
||||
$env:PATH += ";$env:LOCALAPPDATA\Python\pythoncore-3.14-64\Scripts"
|
||||
pre-commit install
|
||||
Постоянно (нужно ОДИН раз):
|
||||
|
||||
[Environment]::SetEnvironmentVariable(
|
||||
"PATH",
|
||||
$env:PATH + ";$env:LOCALAPPDATA\Python\pythoncore-3.14-64\Scripts",
|
||||
"User"
|
||||
)
|
||||
|
||||
Host gendesign
|
||||
HostName 46.173.16.127
|
||||
User gendesign
|
||||
Port 22
|
||||
IdentityFile ~/.ssh/gendesign_deploy
|
||||
IdentitiesOnly yes
|
||||
ServerAliveInterval 60
|
||||
LocalForward 15432 127.0.0.1:5432
|
||||
LocalForward 8000 127.0.0.1:8000
|
||||
|
||||
|
||||
token admin 15c99983d471718fe5c320f36bad01994d91ff34cb5646ce957b060ec039275e
|
||||
|
||||
|
||||
ключ от обсидиан gendesign@gendesign:~$ PASSWORD=$(openssl rand -base64 32)
|
||||
cho "Sgendesign@gendesign:~$ echo "Save this: $PASSWORD"
|
||||
Save this: femp1ueSrQoD2cV/9m7YC8bmIuMOHz0JMmrpmD5Z1Ns=
|
||||
curl -u obsidian:<femp1ueSrQoD2cV/9m7YC8bmIuMOHz0JMmrpmD5Z1Ns=> https://obsidian.gendsgn.ru/gendesign-vault
|
||||
|
||||
сеть PS C:\Users\user> ssh gendesign 'docker network create gendesign_shared'
|
||||
560a390e7b231eb2e0657ee96c8add1561ce772716b9db5b593b0950669df644
|
||||
Loading…
Add table
Reference in a new issue