hydrobuddy/secrets
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ops: add Cloudflare R2 creds (backups + images, EU jurisdiction)

Browse source
This commit is contained in:
Claude 2026-05-30 21:45:14 +02:00
parent 30fc381a83
commit 252d9fb2ee
3 changed files with 62 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
passwords.md
View file

@ -39,6 +39,17 @@ _Last updated: 2026-05-30 (new-VPS bring-up)._
- API key: `sk_uKbxm1S3UCmQkOcCzVpuUFDPELseLw03czZ9exjOoRDsHgO9` ⚠️ rotate (was in chat)
- _TODO: SPF / DKIM / DMARC DNS records in Cloudflare (values from SendKit)._
## Cloudflare R2 (object storage — backups + images)
- Bucket: `cannabuddy`
- S3 endpoint (default): `https://e840f5bb6d09cb2c0294f434f35642a9.r2.cloudflarestorage.com`
- **S3 endpoint (EU jurisdiction — use this, GDPR):** `https://e840f5bb6d09cb2c0294f434f35642a9.eu.r2.cloudflarestorage.com`
- Public/custom domain: `r2.cannabuddy.eu`
- Region for S3 clients: `auto`
- API token: `cfat_bL4s5zcL4PBZ648Wl2ud1km78uMpaRNLLao6qMfy9645f7e5`
- Access Key ID: `e67b72e868242044374c382193f98aa8`
- Secret Access Key: `6e6421e28386a163f0fe80167a50cb1bb18f3dc68786930e1dba80ea6583a57a`
- Uses: nightly encrypted `pg_dump` backups → R2; later image uploads (presigned URLs).
## App secrets — to generate fresh on the new box (do NOT reuse old)
- `DATABASE_URL` (TimescaleDB role + password) — _TODO_
- Better-Auth secret (`BETTER_AUTH_SECRET`) — _TODO (openssl rand -hex 32)_