`ROTATION-TEMPLATE.env`

211 lines
# TK-10045 credential ROTATION TEMPLATE — fill NEW values, then:  cat ROTATION-TEMPLATE.env | node cli.js import-paste
# (import-paste verifies each key against its provider, then fans it to every routed dest. Leave a line BLANK to skip it.)
# Values are NEVER echoed back — registry stores last4+sha only.


# ===== TIER 1 — MONEY / INFRA / IDENTITY (confirmed LIVE — rotate TODAY) =====
STRIPE_SECRET_KEY=
STRIPE_PUBLISHABLE_KEY=
SHOPIFY_ADMIN_TOKEN=
SHOPIFY_DRAFT_TOKEN=
SHOPIFY_ORDERS_TOKEN=
CLOUDFLARE_API_TOKEN=
CLOUDFLARE_ACCOUNT_ID=
GODADDY_API_KEY=
GODADDY_API_SECRET=
GODADDY_PAT=
TWILIO_ACCOUNT_SID=
TWILIO_AUTH_TOKEN=

# ===== TIER 1 — DATABASE (rotate + ALTER ROLE on Postgres; DSN rewrite fans DATABASE_URL) =====
DW_ADMIN_DB_PASSWORD=
DW_ADMIN_PG_PASSWORD=
REPL_USER_PG_PASSWORD=
VCL_KAMATERA_PG_PASSWORD=
FREDDY_APP_DB_PASSWORD=
GRANT_APP_DB_PASSWORD=
PATTY_APP_DB_PASSWORD=

# ===== TIER 2 — LLM / API (all LIVE except OpenAI which is already dead — regen to restore) =====
ANTHROPIC_API_KEY=
OPENAI_API_KEY=
MOONSHOT_API_KEY=
XAI_API_KEY=
GEMINI_API_KEY=
ELEVENLABS_API_KEY=
REPLICATE_API_TOKEN=
BROWSERBASE_API_KEY=
BROWSERBASE_PROJECT_ID=
HEYGEN_API_KEY=
OPENROUTER_API_KEY=
DATAFORSEO_API_KEY=
APIFY_TOKEN=
TWOCAPTCHA_API_KEY=

# ===== TIER 2 — SLACK / SOCIAL / MAIL =====
SLACK_BOT_TOKEN=
SLACK_APP_TOKEN=
SLACK_SIGNING_SECRET=
SLACK_CLIENT_SECRET=
SLACK_VERIFICATION_TOKEN=
META_ACCESS_TOKEN=
THREADS_ACCESS_TOKEN=
TIKTOK_CLIENT_SECRET=
PURELYMAIL_API_TOKEN=
GEORGE_AUTH=

# ===== TIER 3 — everything else (153 keys: app/admin passwords, vendor trade logins, etc.) =====
ABRAMSEGO_PROD_PASS=
ABRAMSEGO_PROD_URL=
ABRAMSEGO_PROD_USER=
ADMIN_KEY=
ADMIN_PASS_DW_FLEET=
AGENTABRAMS_ADMIN_PASSWORD=
APPROVE_LINK_SECRET=
BRAVE_SEARCH_API_KEY=
BUTLR_EXTERNAL_SECRET=
BUTLR_OWNER_TOKEN=
CC_CLIENT_ID=
CC_CLIENT_SECRET=
CC_REFRESH_TOKEN=
CC_SECRET=
CENSUS_API_KEY=
CLOUDFLARE_PAGES_TOKEN=
COSTARICA_AGENTABRAMS_PASSWORD=
DEDAR_LOGIN_URL=
DEDAR_PASSWORD=
DEDAR_USERNAME=
DESIGNERSGUILD_LOGIN_URL=
DESIGNERSGUILD_PORTAL_PASS=
DESIGNERSGUILD_PORTAL_USER=
DPLA_API_KEY=
FAA_EMAIL=
FAA_PASSWORD=
FASHN_API_KEY=
FFEPURCHASING_INFO_PW=
FOURSQUARE_PORTAL_PASSWORD=
FREDDY_AUTH_PASSWORD=
GCV_API_KEY=
GEMINI_API_KEY_WALLCO=
GMAIL_BASIC_AUTH_B64=
GMC_MERCHANT_ID=
GMC_SA_KEY_PATH=
GOOGLE_CLIENT_SECRET=
GOOGLE_OAUTH_CLIENT_ID=
GOOGLE_OAUTH_CLIENT_SECRET=
GOOGLE_PLACES_API_KEY=
GOVAUCTIONS_API_KEY=
GRANT_AUTH_PASSWORD=
GRANT_AUTH_USERNAME=
HOSPITALITYWALLCOVERINGS_INFO_PW=
HUB_AUTH_PASSWORD=
IG_ACCESS_TOKEN=
IG_USER_ID=
INFO_LOSANGELESFABRICS_COM_PASSWORD=
INFO_NATIONALPAPERHANGERS_COM_PASSWORD=
INFO_VENTURACLAW_COM_PASSWORD=
INFO_VENTURACLAW_PASSWORD=
JWT_SECRET=
KALSHI_API_KEY=
KAMATERA_ORIGIN_IP=
LAWYER_DIRECTORY_ADMIN_PASSWORD=
LINKEDIN_CLIENT_ID=
LINKEDIN_CLIENT_SECRET=
MAGIC_API_KEY=
MAIL_FROM=
META_APP_ID=
META_APP_SECRET=
MP_DESIGNER_SECRET=
NEWWALL_LOGIN_URL=
NEWWALL_TRADE_EMAIL=
NEWWALL_TRADE_PASSWORD=
NORMA_ADMIN_PASSWORD=
OSBORNE_PASSWORD=
OSBORNE_USERNAME=
PATTY_AUTH_PASSWORD=
PCW_PLACE_ID=
POPPY_SESSION_SECRET=
POSTIZ_API_KEY=
PURELYMAIL_CLAUDE_AGENTABRAMS_PASSWORD=
PURELYMAIL_INFO_GLITTERWALLS_PASSWORD=
PURELYMAIL_INFO_WALLPAPERSBACK_PASSWORD=
PURELYMAIL_NOREPLY_AGENTABRAMS_PASSWORD=
SANDERSON_PASSWORD=
SCHUMACHER_PASS=
SCHUMACHER_USER=
SHOPIFY_CONTENT_TOKEN=
SHOPIFY_DW_ADMIN_TOKEN_CONTENT=
SHOPIFY_DW_APP_CLIENT_ID=
SHOPIFY_DW_APP_CLIENT_SECRET=
SHOPIFY_NOVASUEDE_APP_CLIENT_ID=
SHOPIFY_NOVASUEDE_APP_CLIENT_SECRET=
SHOPIFY_SAMPLE_VARIANT_ID=
SHOPIFY_STORE=
SHOPIFY_STORE_DOMAIN=
SHOPIFY_THEME_TOKEN=
SLACK_APP_ID=
SLACK_CLIENT_ID=
SLACK_REPORTS_CHANNEL=
SLACK_TEAM_ID=
SMB_BUILDER_ADMIN_TOKEN=
SPOONFLOWER_EMAIL=
SPOONFLOWER_PASSWORD=
SPOONFLOWER_WALLCO_EMAIL=
SPOONFLOWER_WALLCO_PASSWORD=
STOUT_PASSWORD=
STOUT_USERNAME=
STRIPE_NPH_WEBHOOK_SECRET=
STRIPE_PRICE_ENTERPRISE_MONTH=
STRIPE_PRICE_LAWYER_PRO_MONTHLY=
STRIPE_PRICE_PRO_MONTH=
STRIPE_PRICE_PRO_YEAR=
STRIPE_PRICE_SIGNATURE_MONTH=
STRIPE_PRICE_SIGNATURE_YEAR=
STRIPE_PRICE_VCL_PREMIER_MONTH=
STRIPE_PRICE_VCL_STANDARD_MONTH=
STRIPE_PRICE_VCL_STARTER_MONTH=
STRIPE_TIER_WEBHOOK_SECRET=
STRIPE_VCL_WEBHOOK_SECRET=
THIBAUT_TRADE_PASSWORD=
THIBAUT_TRADE_USERNAME=
THREADS_APP_ID=
THREADS_APP_SECRET=
THREADS_USER_ID=
TIKTOK_ACCESS_TOKEN=
TIKTOK_CLIENT_KEY=
TIKTOK_OPEN_ID=
TIKTOK_REFRESH_TOKEN=
TIKTOK_SANDBOX_CLIENT_KEY=
TIKTOK_SANDBOX_CLIENT_SECRET=
TWILIO_PHONE_NUMBER=
VAPI_API_KEY=
VAPI_PUBLIC_KEY=
VCC_ADMIN_PASS=
VENTURACLAW_ADMIN_PASSWORD=
VENTURACLAW_DEMO_PASSWORD=
WALLCO_AI_ADMIN_TOKEN=
WALLCO_AI_BACKUP_20260529_PASSPHRASE=
WALLPAPERCANADA_INFO_PW=
WALLPAPERSBACK_CREATIVEMARKET_PW=
WALLPAPERSBACK_ETSY_PW=
WALLPAPERSBACK_PATTERNBANK_PW=
WALLPAPERSBACK_REDBUBBLE_PW=
WALLPAPERSBACK_SOCIETY6_PW=
WPB_INSTAGRAM_HANDLE=
WPB_INSTAGRAM_PASSWORD=
WPB_SOCIAL_EMAIL=
WPB_SOCIAL_PHONE=
WPB_TIKTOK_HANDLE=
WPB_TIKTOK_PASSWORD=
WPB_X_HANDLE=
WPB_X_PASSWORD=
X_API_KEY=
X_API_SECRET=
X_BEARER_TOKEN=
X_DEFAULT_PASSWORD=
YORKWALL_PASS=
YORKWALL_USER=
YOUTUBE_CLIENT_ID=
YOUTUBE_CLIENT_SECRET=
ZENDESK_WIDGET_KEY=