- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
placeholders across 24 files (review-named 12 + noise-audit finds:
WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)
22 lines
359 B
Markdown
22 lines
359 B
Markdown
---
|
||
created: 2026-01-05
|
||
---
|
||
|
||
postgresql:
|
||
dendrite/windyboy2006
|
||
|
||
reCAPTCHA
|
||
key: 6LemvrUlAAAAAPqUuH_1V-lWdKAeEORzeAEhor46
|
||
secret: {{SECRET_DENDRITE_RECAPTCHA_SECRET}}
|
||
|
||
admin:
|
||
windy / {{SECRET_DENDRITE_ADMIN}}(实际值见 Vaultwarden)
|
||
|
||
AccessToken: {{SECRET_DENDRITE_ACCESS_TOKEN}}
|
||
|
||
|
||
matrix media repo:
|
||
media_repo:windyboy2006@localhost:matrix_media_repo
|
||
|
||
|