[object Object]

← back to Secrets Manager

secrets: arm Low+Medium remote routes per Steve go + DTD-A (31 keys; GEORGE_AUTH kept manual)

b8a2534be7615efffd58653d4e26c3b2562ba61a · 2026-07-09 19:04:53 -0700 · steve

Files touched

Diff

commit b8a2534be7615efffd58653d4e26c3b2562ba61a
Author: steve <steve@designerwallcoverings.com>
Date:   Thu Jul 9 19:04:53 2026 -0700

    secrets: arm Low+Medium remote routes per Steve go + DTD-A (31 keys; GEORGE_AUTH kept manual)
---
 remote-routes.json | 258 ++++++++++++++++++++++++++++++++++++++++++++++++++---
 1 file changed, 248 insertions(+), 10 deletions(-)

diff --git a/remote-routes.json b/remote-routes.json
index 8c1cdd3..d65c81c 100644
--- a/remote-routes.json
+++ b/remote-routes.json
@@ -1,27 +1,265 @@
 {
-  "_comment": "REMOTE destinations for secrets that live on a server (not just local .env files). routes.json fan-out is local-file only; this file drives push-remote.js, which SSHes the master value into a remote .env (in place, with .bak backup) and reloads the named pm2 process. Value travels over SSH via STDIN, never argv (so it never shows in the remote process list). Add a key here when a rotated secret must also land on a remote host.",
-  "CLOUDFLARE_API_TOKEN": [
+  "_comment": "REMOTE destinations for secrets on servers. push-remote.js SSHes the master value into each remote .env (in place, .bak backup, value via stdin not argv) and reloads the named pm2 process; compare-first (no-op if unchanged). Armed 2026-07-09 per Steve go + DTD verdict A (Low+Medium). GEORGE_AUTH (20 sister sites) DELIBERATELY EXCLUDED \u2014 high fan-out, supervised manual rotation only, not an auto-route.",
+  "SHOPIFY_ADMIN_TOKEN": [
     {
       "host": "root@45.61.58.125",
-      "path": "/root/Projects/all-designerwallcoverings/.env",
-      "pm2": "all-designerwallcoverings",
-      "note": "all.designerwallcoverings.com crawler CF-zone seed (Kamatera)"
+      "path": "/root/public-projects/wallpapersback/.env",
+      "pm2": "wallpapersback"
+    },
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/.env",
+      "pm2": "momentum-crawler"
+    },
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/dwphoto/.env",
+      "pm2": "dwphoto"
+    }
+  ],
+  "GEMINI_API_KEY": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/DW-Agents/marketing-command-center/.env",
+      "pm2": "marketing-command-center"
+    },
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/DW-Agents/art-print-agent/.env",
+      "pm2": "art-print-agent"
+    },
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/dwphoto/.env",
+      "pm2": "dwphoto"
+    }
+  ],
+  "SHOPIFY_DRAFT_TOKEN": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/wallpapersback/.env",
+      "pm2": "wallpapersback"
+    },
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/.env",
+      "pm2": "momentum-crawler"
+    }
+  ],
+  "SLACK_BOT_TOKEN": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/new-designer-wallcoverings/.env",
+      "pm2": "new-designer-wallcoverings"
+    },
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/Designer-Wallcoverings/DW-MCP/.env",
+      "pm2": "dw-mcp"
+    }
+  ],
+  "BUTLR_EXTERNAL_SECRET": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/NationalPaperHangers/.env",
+      "pm2": "national-paper-hangers"
+    },
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/butlr/.env",
+      "pm2": "butlr"
+    }
+  ],
+  "ANTHROPIC_API_KEY": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/opt/big-red/.env",
+      "pm2": "aichat"
+    },
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/Designer-Wallcoverings/DW-MCP/.env",
+      "pm2": "dw-mcp"
+    }
+  ],
+  "TWILIO_AUTH_TOKEN": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/butlr/.env",
+      "pm2": "butlr"
+    },
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/Designer-Wallcoverings/DW-MCP/.env",
+      "pm2": "dw-mcp"
+    }
+  ],
+  "JWT_SECRET": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/wallpapersback/.env",
+      "pm2": "wallpapersback"
+    }
+  ],
+  "MP_DESIGNER_SECRET": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/wallpapersback/.env",
+      "pm2": "wallpapersback"
+    }
+  ],
+  "GOOGLE_OAUTH_CLIENT_SECRET": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/koroseal-quote-api/.env",
+      "pm2": "koroseal-quote-api"
+    }
+  ],
+  "INFO_NATIONALPAPERHANGERS_COM_PASSWORD": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/NationalPaperHangers/.env",
+      "pm2": "national-paper-hangers"
+    }
+  ],
+  "LINKEDIN_CLIENT_SECRET": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/NationalPaperHangers/.env",
+      "pm2": "national-paper-hangers"
+    }
+  ],
+  "STRIPE_NPH_WEBHOOK_SECRET": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/NationalPaperHangers/.env",
+      "pm2": "national-paper-hangers"
+    }
+  ],
+  "STRIPE_SECRET_KEY": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/NationalPaperHangers/.env",
+      "pm2": "national-paper-hangers"
+    }
+  ],
+  "CC_CLIENT_SECRET": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/DW-Agents/cc-agent/.env",
+      "pm2": "cc-agent"
+    }
+  ],
+  "META_ACCESS_TOKEN": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/DW-Agents/marketing-command-center/.env",
+      "pm2": "marketing-command-center"
+    }
+  ],
+  "SHOPIFY_ORDERS_TOKEN": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/.env",
+      "pm2": "momentum-crawler"
+    }
+  ],
+  "TWOCAPTCHA_API_KEY": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/.env",
+      "pm2": "momentum-crawler"
+    }
+  ],
+  "VCC_ADMIN_PASS": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/.env",
+      "pm2": "momentum-crawler"
+    }
+  ],
+  "CC_SECRET": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/ventura-claw/.env",
+      "pm2": "ventura-claw"
+    }
+  ],
+  "BUTLR_OWNER_TOKEN": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/butlr/.env",
+      "pm2": "butlr"
+    }
+  ],
+  "ELEVENLABS_API_KEY": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/butlr/.env",
+      "pm2": "butlr"
+    }
+  ],
+  "OPENAI_API_KEY": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/butlr/.env",
+      "pm2": "butlr"
+    }
+  ],
+  "VAPI_API_KEY": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/butlr/.env",
+      "pm2": "butlr"
     }
   ],
   "BROWSERBASE_API_KEY": [
     {
       "host": "root@45.61.58.125",
       "path": "/root/Projects/all-designerwallcoverings/.env",
-      "pm2": "all-designerwallcoverings",
-      "note": "all.dw one-click live vendor-portal stock scrape (Browserbase)"
+      "pm2": "all-designerwallcoverings"
     }
   ],
   "BROWSERBASE_PROJECT_ID": [
     {
       "host": "root@45.61.58.125",
       "path": "/root/Projects/all-designerwallcoverings/.env",
-      "pm2": "all-designerwallcoverings",
-      "note": "all.dw Browserbase project id (paired with BROWSERBASE_API_KEY)"
+      "pm2": "all-designerwallcoverings"
+    }
+  ],
+  "CLOUDFLARE_API_TOKEN": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/all-designerwallcoverings/.env",
+      "pm2": "all-designerwallcoverings"
+    }
+  ],
+  "SLACK_CLIENT_SECRET": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/Designer-Wallcoverings/DW-MCP/.env",
+      "pm2": "dw-mcp"
+    }
+  ],
+  "SLACK_SIGNING_SECRET": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/Projects/Designer-Wallcoverings/DW-MCP/.env",
+      "pm2": "dw-mcp"
+    }
+  ],
+  "GOOGLE_PLACES_API_KEY": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/prestige-car-wash/.env",
+      "pm2": "prestige-car-wash"
+    }
+  ],
+  "GCV_API_KEY": [
+    {
+      "host": "root@45.61.58.125",
+      "path": "/root/public-projects/dwphoto/.env",
+      "pm2": "dwphoto"
     }
   ]
-}
+}
\ No newline at end of file

← fa26afa secrets: fleet secrets→service audit → remote-routes.propose  ·  back to Secrets Manager  ·  auto-save: 2026-07-09T23:42:48 (2 files) — registry.json rou 6a60280 →