mkowalski/customer-deploy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: remove hardcoded credentials from repo

Browse Source 
Do not commit AWS keys directly. Use ansible-vault or environment
injection at deploy time. prod.env should never have been in here.
This commit is contained in:
Mike Kowalski 2025-11-29 09:07:18 -06:00
parent 2b1f5014ea
commit 4a75be6699
1 changed files with 0 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
deploy/site_vars/prod.env
View File

@ -1,7 +0,0 @@
# AWS credentials for S3 log archival — Galion Systems deployment account
# Used by the Prometheus remote_write → S3 exporter
AWS_ACCESS_KEY_ID=AKIA5CAZFFKVO4PXVZBO
AWS_SECRET_ACCESS_KEY=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
AWS_DEFAULT_REGION=us-east-1
S3_BUCKET=galion-monitoring-archive