security: untrack .env (still present on disk, just not in git)

f69313828b8d1b4322b20df02148dcfc315d1e06 · 2026-05-11 10:02:30 -0700 · SteveStudio2

.env was committed before .gitignore exclusion was in place. File remains
on disk and functional; this stops future commits and prevents the next
git push (if any remote is ever added) from leaking secrets.
No remote currently configured, so no public exposure occurred.

Files touched

D .env

Diff

commit f69313828b8d1b4322b20df02148dcfc315d1e06
Author: SteveStudio2 <stevestudio2@SteveStacStudio.lan>
Date:   Mon May 11 10:02:30 2026 -0700

    security: untrack .env (still present on disk, just not in git)
    
    .env was committed before .gitignore exclusion was in place. File remains
    on disk and functional; this stops future commits and prevents the next
    git push (if any remote is ever added) from leaking secrets.
    No remote currently configured, so no public exposure occurred.
---
 .env | 35 -----------------------------------
 1 file changed, 35 deletions(-)

diff --git a/.env b/.env
deleted file mode 100644
index 5b851b8..0000000
--- a/.env
+++ /dev/null
@@ -1,35 +0,0 @@
-# Site Factory — master secrets.
-# Fill these in (paste from the dashboards) and I'll fan them out to:
-#   ~/Projects/site-factory/.env (auto-mirror)
-#   ~/Desktop/{wholivedthere,bubbesblock,claimmyaddress}.env (per-site)
-#
-# After save, run:
-#   bash ~/Projects/site-factory/scripts/run-all-stages.sh
-
-# ─── Cloudflare (Zone:Edit + DNS:Edit on All zones) ──────────────────────
-CLOUDFLARE_API_TOKEN=8YNGYMvhTreWDez25CDGQfA1WAHMtAGPZXPYlYcL
-
-# ─── Stripe (Restricted: Products/Prices/Checkout/Customers/Subs/Webhooks) ─
-STRIPE_SECRET_KEY=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
-STRIPE_PUBLISHABLE_KEY=pk_live_51TRy1U63uNmiRsMbbNLeB1oaZnCdKXZSvrGhLhDIE495AnKQoTTcjvEvLZeA4NUtcSJBVCFUqZBRdxtvLmntzagK00RpB0wzmV
-# Created later: STRIPE_WEBHOOK_SECRET (after first webhook endpoint create)
-
-# ─── Vercel (Full account, 1y) ───────────────────────────────────────────
-VERCEL_TOKEN=
-
-# ─── PurelyMail (info@<domain>) ──────────────────────────────────────────
-PURELYMAIL_API_TOKEN=
-
-# ─── GoDaddy (already in domain-suite MCP) ───────────────────────────────
-# GODADDY_API_KEY=  # auto-loaded from MCP config
-# GODADDY_API_SECRET=
-
-# ─── Browserbase (already in skill) ──────────────────────────────────────
-# BROWSERBASE_API_KEY=  # auto-loaded from skill .env
-# BROWSERBASE_PROJECT_ID=
-
-# ─── Kamatera origin ────────────────────────────────────────────────────
-KAMATERA_ORIGIN_IP=45.61.58.125
-
-# ─── Google (run /analytics skill — no key needed here) ──────────────────
-# Google OAuth handled per-skill, not via env.

← 9523023 untrack node_modules per standing rule (was tracking 804 fil · back to Site Factory · snapshot: 27 file(s) changed, +2 new, ~25 modified e6f32b5 →