From 48c3901ac6ba7ae4b7a6caaabb6c3f78b7a3189f Mon Sep 17 00:00:00 2001 From: Mike Kowalski Date: Sat, 29 Nov 2025 09:07:18 -0600 Subject: [PATCH] fix: remove hardcoded credentials from repo Do not commit AWS keys directly. Use ansible-vault or environment injection at deploy time. prod.env should never have been in here. --- deploy/site_vars/prod.env | 7 ------- 1 file changed, 7 deletions(-) delete mode 100644 deploy/site_vars/prod.env diff --git a/deploy/site_vars/prod.env b/deploy/site_vars/prod.env deleted file mode 100644 index 9cccf04..0000000 --- a/deploy/site_vars/prod.env +++ /dev/null @@ -1,7 +0,0 @@ -# AWS credentials for S3 log archival — Galion Systems deployment account -# Used by the Prometheus remote_write → S3 exporter - -AWS_ACCESS_KEY_ID=AKIA5CAZFFKVO4PXVZBO -AWS_SECRET_ACCESS_KEY=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 -AWS_DEFAULT_REGION=us-east-1 -S3_BUCKET=galion-monitoring-archive