sanitize: redact secrets from docs, add forefront-broadband-map, exclude backup dir

- Redact credentials/keys from README, key-inventory, model-chain, ops-portal docs, project-log, systems-networks-team, app3
- Add forefront-broadband-map.md with sanitized content
- Add .gitignore to permanently exclude .backup-before-sanitize-20260723/ and .env files
- No credentials rotated; no history rewritten
This commit is contained in:
root
2026-07-23 12:03:10 -04:00
parent 35daf41fe9
commit ec0eba9645
10 changed files with 149 additions and 111 deletions
+2 -2
View File
@@ -52,8 +52,8 @@ Always load these before beginning a sys/net task:
## Key Credentials
- SSH key: `/root/.ssh/itpp-infra` (all servers, root access)
- CloudPanel MySQL root: `MOQMINFQIhklM0AF` on 127.0.0.1:3306 (app3)
- CloudPanel admin: panel.itpropartner.com (gmb / CP2026)
- CloudPanel MySQL root: password in Vaultwarden + `/root/.my.cnf` on app3, accessible on 127.0.0.1:3306
- CloudPanel admin: panel.itpropartner.com (gmb — password → Vaultwarden)
- Wasabi S3: s3.us-east-1.wasabisys.com, bucket: hermes-vps-backups
- Cloudflare API: token in /root/.hermes/.env (CLOUDFLARE_API_TOKEN)