From 6f372402beb8d4c6f2cc7460a29145427321edfe Mon Sep 17 00:00:00 2001
From: TradeIn Deploy <tradein@gendsgn.ru>
Date: Fri, 22 May 2026 10:28:23 +0500
Subject: [PATCH] =?UTF-8?q?chore(security):=20=D1=83=D0=B1=D1=80=D0=B0?=
 =?UTF-8?q?=D1=82=D1=8C=20sshkey.txt=20=D0=B8=D0=B7=20=D1=80=D0=B5=D0=BF?=
 =?UTF-8?q?=D0=BE=D0=B7=D0=B8=D1=82=D0=BE=D1=80=D0=B8=D1=8F=20(#391)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

sshkey.txt содержит открытым текстом GHCR-PAT, пароли БД, ADMIN_TOKEN,
пароль Obsidian. git rm --cached снимает файл с отслеживания (локальная
копия остаётся) + добавлен в .gitignore.

Частично закрывает #391. Остаётся (требует ручных действий):
- ротация всех засвеченных секретов;
- чистка истории git (filter-repo) — секреты остаются в старых коммитах.
---
 .gitignore |   2 ++
 sshkey.txt | 104 -----------------------------------------------------
 2 files changed, 2 insertions(+), 104 deletions(-)
 delete mode 100644 sshkey.txt

diff --git a/.gitignore b/.gitignore
index c3eb4649..5f30963f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -27,6 +27,8 @@ frontend/.sentryclirc
 .env.*.local
 .env.runtime
 .mcp.json
+# креды-заметки — НЕ коммитить (см. issue #391)
+sshkey.txt
 
 # IDE
 .vscode/
diff --git a/sshkey.txt b/sshkey.txt
deleted file mode 100644
index 87ed5312..00000000
--- a/sshkey.txt
+++ /dev/null
@@ -1,104 +0,0 @@
-Your identification has been saved in C:\Users\user\.ssh\gendesign_deploy
-Your public key has been saved in C:\Users\user\.ssh\gendesign_deploy.pub
-The key fingerprint is:
-SHA256:50HjJLdk9XaRDRjvKIB9LrRoux6KojXQZvgqLm7LEks gendesign-deploy
-The key's randomart image is:
-+--[ED25519 256]--+
-|            oo.oo|
-|       o   ..o .o|
-|      . = O   + .|
-| o     o & o + . |
-|o +   o S B . .  |
-|.E   . . + o     |
-|.o+   o   .      |
-|B+ o . o         |
-|@*o ..o          |
-+----[SHA256]-----+
-
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPGKuThuQMPdjxdA9FXHkUZUO+iyVbSMOxy3qFbOY7+K gendesign-deploy
-
-mYsNNJf%6hpN
-
-`gendesign' 12345 ssh gendesign
-
-for github
-Generating public/private ed25519 key pair.
-Your identification has been saved in /home/gendesign/.ssh/github_deploy
-Your public key has been saved in /home/gendesign/.ssh/github_deploy.pub
-The key fingerprint is:
-SHA256:W9Ioi7A/d+LxIghIOoF4rGurbEnIHuVjDtfF1Ki+C1o gendesign-server-deploy-key
-The key's randomart image is:
-+--[ED25519 256]--+
-|        o        |
-|       o .       |
-|o.    +          |
-|+.o. . o o       |
-|*++ o o S o      |
-|B= B + o +       |
-|o+OEo + .        |
-|o=+o+.+o.        |
-|=+. .*o+.        |
-+----[SHA256]-----+
-
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPYYAH7vPN/b0npfH1IrhADdE+SwJsmo8gJm84VauM4m gendesign-server-deploy-key
-
-pg pass 2J2SBPMKuS998fiwhtQqDhMI
-
-ssh -i $HOME\.ssh\gendesign_deploy gendesign@46.173.16.127
-
-pat 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
-
-echo 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| docker login ghcr.io -u lekss361 --password-stdin
-
-ssh -N -L 15432:localhost:5432 gendesign
-Host:     localhost
-Port:     15432
-Database: gendesign
-Username: gendesign
-Password: 2J2SBPMKuS998fiwhtQqDhMI
-
-Локально установить pre-commit один раз:
-make pre-commit-install
-# или:
-pip install pre-commit
-pre-commit install
-
-python -m pre_commit install
-
-python -m pre_commit run --all-files
-# или, если PATH добавлен:
-pre-commit run --all-files
-
-Только текущая сессия:
-
-$env:PATH += ";$env:LOCALAPPDATA\Python\pythoncore-3.14-64\Scripts"
-pre-commit install
-Постоянно (нужно ОДИН раз):
-
-[Environment]::SetEnvironmentVariable(
-    "PATH",
-    $env:PATH + ";$env:LOCALAPPDATA\Python\pythoncore-3.14-64\Scripts",
-    "User"
-)
-
-Host gendesign
-    HostName 46.173.16.127
-    User gendesign
-    Port 22
-    IdentityFile ~/.ssh/gendesign_deploy
-    IdentitiesOnly yes
-    ServerAliveInterval 60
-    LocalForward 15432 127.0.0.1:5432
-    LocalForward 8000 127.0.0.1:8000
-
-
-token admin 15c99983d471718fe5c320f36bad01994d91ff34cb5646ce957b060ec039275e
-
-
-ключ от обсидиан gendesign@gendesign:~$ PASSWORD=$(openssl rand -base64 32)
-cho "Sgendesign@gendesign:~$ echo "Save this: $PASSWORD"
-Save this: femp1ueSrQoD2cV/9m7YC8bmIuMOHz0JMmrpmD5Z1Ns=
-curl -u obsidian:<femp1ueSrQoD2cV/9m7YC8bmIuMOHz0JMmrpmD5Z1Ns=> https://obsidian.gendsgn.ru/gendesign-vault
-
-сеть PS C:\Users\user> ssh gendesign 'docker network create gendesign_shared'
-560a390e7b231eb2e0657ee96c8add1561ce772716b9db5b593b0950669df644
-- 
2.45.3