mrcharles
af7c0f3478
Excluded admin-code/*SECRETS.inc (real Nitrokey HSM PINs in the public source repo) — SECRETS.inc.example template added in their place. Rotation/history-purge ruling pending in #783. legacy-* trees exempt from lint/pointer checks (historical verbatim code). https://projects.knownelement.com/issues/769#note-4152
7 lines
291 B
Bash
7 lines
291 B
Bash
#!/bin/bash
|
|
# TEMPLATE ONLY — real values lived in *SECRETS.inc which were EXCLUDED from
|
|
# this port after a secret-scan (Nitrokey SO PIN + USER PIN; see #783).
|
|
# Populate at deploy time from ~/.creds or the secrets store — never commit.
|
|
export SECRET_SOPIN=""
|
|
export SECRET_USER_PIN=""
|