Tagged: secrets
Pages with this tag
5 · Wire .env templates
1Back up the vendor's env into the project vault, lay down local/staging/production templates, activate local and generate the app key, then verify the per-environment values that differ.
3 · Production .env
2Assemble a safe production env source — bidirectional drift check against .env.example, a Git-history secret scan, production flags, and a secrets-manager render check. Server upload and runtime verification happen in Phase 5 or Phase 12.
1 · Pre-flight security hygiene (P0)
3Never skip this — rotate every test-mode key and non-production password that touched a chat or log, migrate plaintext credentials into a secrets manager, re-scope over-privileged service accounts, and record the audit.
Wiring vendor consoles with an AI agent
4Drive Discord, Slack, MonSpark, Stripe, Cloudflare, and other provider dashboards safely with browser automation while keeping login, authorization, and secrets human-owned.