2026-06-15 20:10:52 +00:00
|
|
|
# Infrastructure API Credentials
|
|
|
|
|
# IMPORTANT: Keep this file secure and never commit to git
|
|
|
|
|
|
|
|
|
|
# SSH Access (all servers)
|
|
|
|
|
SSH_USER=zvx
|
|
|
|
|
SSH_PASSWORD=7redditGold
|
|
|
|
|
ROOT_PASSWORD=7redditGold
|
|
|
|
|
|
|
|
|
|
# GoDaddy DNS API
|
|
|
|
|
GODADDY_API_KEY=dKiSoC24ZLTR_3KkMjFyYrzgChk1JHjNLnU
|
|
|
|
|
GODADDY_API_SECRET=ExCGBASgSrN4A2mP4daU4G
|
|
|
|
|
|
2026-06-18 05:49:07 +00:00
|
|
|
# Authentik SSO Platform (https://auth.echo6.co) — migrated to edge2 CT 105 / 10.10.10.23 / tailnet 100.64.0.36 on 2026-06-18
|
2026-06-15 20:10:52 +00:00
|
|
|
AUTHENTIK_API_TOKEN=YG24Zu7c7JNhrfC564N2NvJt2HmIr6Jyi9BgV629XGAZC70hvGbyNz8i4l7w
|
|
|
|
|
AUTHENTIK_URL=https://auth.echo6.co
|
|
|
|
|
# Admin credentials for web UI/API access
|
|
|
|
|
AUTHENTIK_ADMIN_USER=akadmin
|
|
|
|
|
AUTHENTIK_ADMIN_PASSWORD=Mue8FI4sRe2ihRzsmypPnQlpDiae6hqHXZafV2n5CTNPJT1JaS6oqYZzbeGu
|
|
|
|
|
|
|
|
|
|
# Wiki.js Documentation Platform (https://docs.echo6.co)
|
|
|
|
|
WIKIJS_ADMIN_EMAIL=akadmin@echo6.co
|
|
|
|
|
WIKIJS_ADMIN_PASSWORD=xh5Q+hWzUe5EqvBQ1tWULlOiPMZX
|
|
|
|
|
WIKIJS_URL=https://docs.echo6.co
|
|
|
|
|
|
|
|
|
|
# Forgejo Git Forge (https://forge.echo6.co)
|
|
|
|
|
FORGEJO_API_TOKEN=043fd2df4731a2bb8a2b8352018031bd454fe9a1
|
|
|
|
|
FORGEJO_URL=https://forge.echo6.co
|
|
|
|
|
|
|
|
|
|
# Usage Notes:
|
|
|
|
|
# - GoDaddy API: Used for automated DNS record management
|
|
|
|
|
# - Authentik API: Used for SSO provider/application configuration
|
|
|
|
|
# - Forgejo API: Used for repository mirroring and automation (ALL PERMISSIONS)
|
|
|
|
|
# - File Location: /home/zvx/projects/selfhosting/.credentials
|
|
|
|
|
# - For agents: Source this file with: source /home/zvx/projects/selfhosting/.credentials
|
|
|
|
|
WIKIJS_API_TOKEN=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcGkiOjIsImdycCI6MSwiaWF0IjoxNzYzOTYxNzUxLCJleHAiOjE3OTU1MTkzNTEsImF1ZCI6InVybjp3aWtpLmpzIiwiaXNzIjoidXJuOndpa2kuanMifQ.LR4qDHT1d8PgwVCo7o8hCbAK19vas5vnROa2IT8InseHh7RwJbnyfc4u71PMzDcIoYJ1QHVeAxhv4SJbkYj-F7b525M63xGuji1pUpxkEaxbZe1iFeQVojSvPvBcw0ZCqMzKtgYNivpSnn9psQulDSFD7Kq63FVte1ABMHeh-s-Mfeqn4pzmgRAMRHZC9l6MSA_cTZ97gxeJCKn9Jyh0LyrQJXYeL0gFG5FvAwOMYDf5fiAmz4Ocyxg4ZMz3q-6Ao9dfB41zbD5WbYwI0qm7wOBDRj3-1-JjMrPJrgYpUOqEuOH1SRDt7VUrOvbxqE7AAM0J8o-7pnVNw1HaseqEiQ
|
|
|
|
|
|
|
|
|
|
# Obsidian LiveSync (https://notes.echo6.co)
|
|
|
|
|
# CouchDB + provisioner on Contabo (5.189.158.149), JWT auth
|
|
|
|
|
LIVESYNC_COUCHDB_USER=admin
|
|
|
|
|
LIVESYNC_COUCHDB_PASSWORD=kGJkZzoVc5eMiu0rGKJgJNyq
|
|
|
|
|
LIVESYNC_PROXY_SECRET=d41933ea00ffb620fa4bb96e0177b3869998c698f5dd7892b86a33fbf8e5aff9
|
|
|
|
|
LIVESYNC_URL=https://notes.echo6.co
|
|
|
|
|
# Config location: Contabo:/opt/livesync/
|
|
|
|
|
|
|
|
|
|
# Open WebUI SSO (ai.echo6.co)
|
|
|
|
|
OPEN_WEBUI_OAUTH_CLIENT_ID=open-webui
|
|
|
|
|
OPEN_WEBUI_OAUTH_CLIENT_SECRET=MfajNL6QZDfDOKprBdYzu3rDya2BoiB5siWt5cYQH1o3zif8ivZ2ZF2HehE3UqLZq2nflwVdYZNhw4tkWQj8kF0dLGA0qDYbBVtUcvtj2AQKQTqAEdRfQF0Oi3slL9OI
|
|
|
|
|
OPEN_WEBUI_AUTHENTIK_PROVIDER_ID=14
|
|
|
|
|
|
|
|
|
|
# Open WebUI API Key (for content sync)
|
|
|
|
|
OPENWEBUI_API_KEY=sk-dbf4c9e6ac915d8151f84bf09e51cf2c03e943918adb1737
|
|
|
|
|
OPENWEBUI_API_URL=http://192.168.1.239:3000
|
|
|
|
|
|
|
|
|
|
# PeerTube (stream.echo6.co)
|
|
|
|
|
PEERTUBE_URL="https://stream.echo6.co"
|
|
|
|
|
PEERTUBE_ADMIN_USER="root"
|
|
|
|
|
PEERTUBE_ADMIN_PASSWORD="7redditGold"
|
|
|
|
|
PEERTUBE_ADMIN_EMAIL="admin@echo6.co"
|
|
|
|
|
|
|
|
|
|
# Echo6 Portal - https://echo6.co
|
|
|
|
|
# Deployed: Echo6-Cloud (192.168.1.241:3002)
|
|
|
|
|
ECHO6_PORTAL_ADMIN_USER=admin
|
|
|
|
|
ECHO6_PORTAL_ADMIN_EMAIL=admin@echo6.co
|
|
|
|
|
ECHO6_PORTAL_ADMIN_PASS=7redditGold
|
|
|
|
|
|
|
|
|
|
# Authentik OAuth2 Provider
|
|
|
|
|
ECHO6_PORTAL_OIDC_CLIENT_ID=echo6-portal
|
|
|
|
|
ECHO6_PORTAL_OIDC_CLIENT_SECRET=15vviNjbzbrtG3WvZxkKrLZv97tcsdzHqWcExp4HarlFlxWInZcKSLixdDWwod67zYxYBDqxkqNR4PNIK0A0XhJSGG6LLK7UHwI1xKeUQt7Dx6bVnDZvqkGP28ewYb4c
|
|
|
|
|
ECHO6_PORTAL_OIDC_ISSUER=https://auth.echo6.co/application/o/echo6-portal/
|
|
|
|
|
|
|
|
|
|
# Stalwart Mail Server — DECOMMISSIONED
|
|
|
|
|
# Was deployed 2025-12-19, removed. Authentik provider PK 53 may still exist.
|
|
|
|
|
# Credentials retained for reference only.
|
|
|
|
|
# STALWART_ADMIN_USER=admin
|
|
|
|
|
# STALWART_ADMIN_PASS=ECu0Q4zsQN
|
|
|
|
|
|
|
|
|
|
# NordVPN (PeerTube Pipeline IP Rotation)
|
|
|
|
|
# Installed on media CT 110 (192.168.1.170)
|
|
|
|
|
# Service: nordvpnd.service (enabled, auto-start)
|
|
|
|
|
# Token: logged in via `nordvpn login --token <token>` — token not stored in file
|
|
|
|
|
# Note: NordVPN token was entered interactively, re-login if needed
|
|
|
|
|
NORDVPN_LOCATION="CT 110 (media)"
|
|
|
|
|
|
2026-06-19 15:24:59 +00:00
|
|
|
# edge1 SSH Access (rebuilt Contabo VPS, mail-only, 2026-06-19)
|
|
|
|
|
# Server: edge1 — Debian 12 + Proxmox 8.4.19, mail-only role
|
|
|
|
|
# Public IP: 5.189.158.149 | Tailscale: 100.64.0.40 (node: contabo)
|
|
|
|
|
# SSH key: ~/.ssh/contabo2_ed25519 (same key as before rebuild)
|
|
|
|
|
# Box password (unrotated): 7redditGold
|
|
|
|
|
# ssh -i ~/.ssh/contabo2_ed25519 root@5.189.158.149
|
|
|
|
|
EDGE1_SSH_USER=root
|
|
|
|
|
EDGE1_SSH_KEY=~/.ssh/contabo2_ed25519
|
|
|
|
|
EDGE1_SSH_PASS=7redditGold
|
|
|
|
|
EDGE1_PUBLIC_IP=5.189.158.149
|
|
|
|
|
EDGE1_TAILSCALE_IP=100.64.0.40
|
|
|
|
|
|
|
|
|
|
# Mailcow (mail.echo6.co) — now on edge1 CT 101 (10.10.10.2), updated commit 52a41b4d (SOGo 5.12.8)
|
|
|
|
|
# Deployed: 2026-06-19 rebuild (privileged LXC on edge1 Proxmox)
|
|
|
|
|
# Access: via host Caddy (mail/autodiscover/autoconfig.echo6.co) + host DNAT (ports 25/465/587/110/143/993/995/4190 → 10.10.10.2)
|
|
|
|
|
# Admin UI: https://mail.echo6.co (same as before)
|
|
|
|
|
# mail_crypt keys (dovecot crypt volume: data/conf/dovecot/):
|
|
|
|
|
# Primary key: ecprivkey.pem (original; must be preserved across rebuilds)
|
|
|
|
|
# Secondary key: ecprivkey.pem.fresh-20260619 (generated by restore; loaded alongside primary)
|
|
|
|
|
# Config: data/conf/dovecot/extra.conf (update-safe, not dovecot.conf)
|
|
|
|
|
# Both keys loaded — required to decrypt old mail encrypted with primary and new mail with secondary
|
|
|
|
|
MAILCOW_ADMIN_USER=admin
|
|
|
|
|
MAILCOW_ADMIN_PASS=7redditGold
|
2026-06-15 20:10:52 +00:00
|
|
|
|
|
|
|
|
# RECON Pipeline Email Alerts (recon@echo6.co)
|
|
|
|
|
# Deployed: 2026-02-01 on Media-Server for pipeline monitoring
|
|
|
|
|
RECON_SMTP_USER=recon@echo6.co
|
|
|
|
|
RECON_SMTP_PASS=LezU3TJ2W8JFj0hXHcJe
|
|
|
|
|
RECON_SMTP_HOST=mail.echo6.co
|
|
|
|
|
RECON_SMTP_PORT=587
|
|
|
|
|
|
|
|
|
|
# Forgejo (forge.echo6.co) - Deployed 2026-02-04
|
2026-06-17 17:17:00 +00:00
|
|
|
# Migrated to edge2 CT 103 (10.10.10.21 / tailnet 100.64.0.34) on 2026-06-16; SSH via Contabo iptables DNAT (forgejo-ssh-dnat.service).
|
2026-06-15 20:10:52 +00:00
|
|
|
FORGEJO_URL="https://forge.echo6.co"
|
|
|
|
|
FORGEJO_ADMIN_USER="matt"
|
|
|
|
|
FORGEJO_ADMIN_PASS="7redditGold"
|
|
|
|
|
FORGEJO_SSH_PORT="2222"
|
2026-06-17 17:17:00 +00:00
|
|
|
FORGEJO_DB_NAME=forgejo
|
|
|
|
|
FORGEJO_DB_USER=forgejo
|
2026-06-15 20:10:52 +00:00
|
|
|
FORGEJO_DB_PASS="forgejo_db_pass_2026"
|
|
|
|
|
|
|
|
|
|
# Forgejo OAuth2 (Authentik)
|
|
|
|
|
FORGEJO_OAUTH_CLIENT_ID="forgejo"
|
|
|
|
|
FORGEJO_OAUTH_CLIENT_SECRET="cUEZgNGfsmoPSvAjM8Y3xOLOAHOg5umaZJBFFPOIWLXSkdezEz5x1lXwV2mhYI89P1XfWihkBBrfnpctSYGeTMJO0DhNb6GYNCRZyHue61wvBJT4yIb68gdOY0NBkv4g"
|
|
|
|
|
|
|
|
|
|
# Authentik API Token (Contabo instance) - claude-api-token (regenerated 2026-02-16 for 2025.12 upgrade)
|
|
|
|
|
AUTHENTIK_API_TOKEN="YG24Zu7c7JNhrfC564N2NvJt2HmIr6Jyi9BgV629XGAZC70hvGbyNz8i4l7w"
|
|
|
|
|
|
|
|
|
|
# Freq51.net MQTT Feeder (Meshtastic)
|
|
|
|
|
# Feeder: AIDA-N2 (Node ID: 27780c47)
|
|
|
|
|
# Malla: https://malla-aida-n2.freq51.net
|
|
|
|
|
# Meshview: https://meshview-aida-n2.freq51.net
|
|
|
|
|
FREQ51_MQTT_USER="aida-n2"
|
|
|
|
|
FREQ51_MQTT_PASS="handwash6unplan3ned-muMbo"
|
|
|
|
|
FREQ51_MQTT_BROKER="mqtt.freq51.net"
|
|
|
|
|
FREQ51_MQTT_PORT="1883"
|
|
|
|
|
|
|
|
|
|
# MeshMonitor (Meshtastic Mesh Monitoring)
|
|
|
|
|
# Location: utility CT 100 (192.168.1.100:8080)
|
|
|
|
|
# Tailscale: 100.64.0.1:8080
|
|
|
|
|
# Updated: 2026-02-04
|
|
|
|
|
MESHMONITOR_URL="http://192.168.1.100:8080"
|
|
|
|
|
MESHMONITOR_TAILSCALE_URL="http://100.64.0.1:8080"
|
|
|
|
|
MESHMONITOR_ADMIN_USER="admin"
|
|
|
|
|
MESHMONITOR_ADMIN_PASS="7redditGold"
|
2026-07-06 18:00:11 +00:00
|
|
|
MESHMONITOR_API_TOKEN="mm_v1_daa2d3fa3574f9bc291b831dc5925428"
|
2026-06-15 20:10:52 +00:00
|
|
|
|
|
|
|
|
# Vaultwarden (Password Manager)
|
|
|
|
|
# Deployed: 2026-02-05 on Contabo VPS
|
|
|
|
|
# URL: https://vault.echo6.co
|
2026-06-17 00:00:14 +00:00
|
|
|
# Local-login account (verified Phase 0a 2026-06-16): matt@echo6.co — master password is SET; Matt has confirmed he knows it.
|
|
|
|
|
# SSO_ONLY=false → local email + master-password login works independent of Authentik.
|
|
|
|
|
# Master password is Matt's own secret — NOT stored here (Vaultwarden keeps only the PBKDF2/Argon2 hash; unrecoverable).
|
2026-06-15 20:10:52 +00:00
|
|
|
VAULTWARDEN_URL="https://vault.echo6.co"
|
|
|
|
|
VAULTWARDEN_ADMIN_TOKEN="lHYCnZvETLirtRYCTICM6i6s2yYbMFjW3CkHwxnO1Brqe6vIq0zKNwF01IWB01"
|
|
|
|
|
VAULTWARDEN_ADMIN_URL="https://vault.echo6.co/admin"
|
|
|
|
|
|
|
|
|
|
# Vaultwarden SSO (Authentik)
|
|
|
|
|
VAULTWARDEN_OIDC_PROVIDER_ID=3
|
|
|
|
|
VAULTWARDEN_OIDC_CLIENT_ID="vaultwarden"
|
|
|
|
|
VAULTWARDEN_OIDC_CLIENT_SECRET="NALriNOTOkCjOA0w02MZWsoRUL9H0pT6eTNBYHsDueeL8sRkAEvG4RADrtcqWrIHi5Zur30CFTOQ3barjAnseQrzA4vrpVEmi1gJVqbWk9llkXOlixI8QMRSKNO4fXGi"
|
|
|
|
|
VAULTWARDEN_OIDC_ISSUER="https://auth.echo6.co/application/o/vaultwarden/"
|
|
|
|
|
|
|
|
|
|
# Proxmox VE SSO (Authentik OIDC)
|
|
|
|
|
# Deployed: 2026-02-05
|
|
|
|
|
# Realm: authentik
|
|
|
|
|
PROXMOX_OIDC_CLIENT_ID="proxmox"
|
|
|
|
|
PROXMOX_OIDC_CLIENT_SECRET="NlpHwyRhY9hMO6j6VtakSyt5M05a0x6WXMDwOFcqRcTVSBPKU8aOVRyIhYq6gJUiBW3e7Qy7z0zR0URZxK0e3BDN0i6hOAIBLZYGrx1jjjQFiIjlmk9e9R8ypOngtmVD"
|
|
|
|
|
PROXMOX_OIDC_ISSUER="https://auth.echo6.co/application/o/proxmox/"
|
|
|
|
|
PROXMOX_OIDC_PROVIDER_ID=4
|
|
|
|
|
|
|
|
|
|
# Headscale VPN (vpn.echo6.co)
|
|
|
|
|
# Deployed: 2026-02-05 on Contabo VPS
|
|
|
|
|
HEADSCALE_URL="https://vpn.echo6.co"
|
|
|
|
|
HEADSCALE_OIDC_CLIENT_ID="headscale"
|
|
|
|
|
HEADSCALE_OIDC_CLIENT_SECRET="lnwpTYerBQQkPIsNIYGpyFgM9zAbyAWOhvH27BSPY0JGZweAaNJWkgINMi6ePQtSdUDEHOWeUQynoDZynVbqfv68352PGcrU0nh8MWVM4Djif5akcCN9TtGPCiaLlMcL"
|
|
|
|
|
HEADSCALE_OIDC_ISSUER="https://auth.echo6.co/application/o/headscale/"
|
|
|
|
|
HEADSCALE_OIDC_PROVIDER_ID=5
|
|
|
|
|
|
|
|
|
|
# Headplane Admin UI (vpn.echo6.co/admin)
|
|
|
|
|
# First OIDC login gets Owner permissions
|
|
|
|
|
HEADPLANE_URL="https://vpn.echo6.co/admin"
|
|
|
|
|
HEADPLANE_OIDC_CLIENT_ID="headplane"
|
|
|
|
|
HEADPLANE_OIDC_CLIENT_SECRET="PYWFFLm8z8GiDA7keUbZMDFVyN6l11pBrgKeqTaLUyOsdSV7AZdW8JUXfGdcPI1jIE4ecaZy0WIyazKzFc89LtSHVkQKQHkBYpo5jRTmP5aXyiQmN8lSdqWlEEVEhk8m"
|
|
|
|
|
HEADPLANE_OIDC_ISSUER="https://auth.echo6.co/application/o/headplane/"
|
|
|
|
|
HEADPLANE_OIDC_PROVIDER_ID=6
|
|
|
|
|
HEADPLANE_API_KEY="hskey-api--6r1vFn_Dx0l-NVvEosw22IKFOvtjZ4Uc2U-IfWZQJOiyCtg7j-6q2UmQl5bDY4UlN9jWYaaKYma6"
|
|
|
|
|
|
|
|
|
|
# Immich Photo Management (immich.echo6.co)
|
|
|
|
|
# Deployed: 2026-02-11 on cloud CT 120 (192.168.1.182)
|
|
|
|
|
# Tailscale: 100.64.0.2
|
|
|
|
|
# NFS storage: pi-nas:/export/immich
|
|
|
|
|
IMMICH_URL="https://immich.echo6.co"
|
|
|
|
|
IMMICH_DB_PASSWORD="wKe7rUrxYkncA0Wo6jjx2AeI29i4UWn"
|
|
|
|
|
IMMICH_COMPOSE_PATH="/opt/immich/docker-compose.yml"
|
|
|
|
|
|
|
|
|
|
# Nextcloud AIO (nextcloud.echo6.co)
|
|
|
|
|
# Deployed: 2026-02-11 on cloud CT 121 (192.168.1.183)
|
|
|
|
|
# Tailscale: 100.64.0.11
|
|
|
|
|
# NFS storage: pi-nas:/export/nextcloud
|
|
|
|
|
NEXTCLOUD_URL="https://nextcloud.echo6.co"
|
|
|
|
|
NEXTCLOUD_AIO_UI="https://192.168.1.183:8080"
|
|
|
|
|
NEXTCLOUD_OIDC_PROVIDER_ID=8
|
|
|
|
|
NEXTCLOUD_OIDC_CLIENT_ID="nextcloud"
|
|
|
|
|
NEXTCLOUD_OIDC_CLIENT_SECRET="yw4NVaIcD65HLkVeC5QjiDjhsJeci2EHDuc7X1D1299AFhgVpbckWnRL7TkNfCUydJ1t11axUuWrp9OzygNdfmhkpev8hhA8QEFBxsTb95pwrFhvXTfydpHTrm3EpUdT"
|
|
|
|
|
NEXTCLOUD_OIDC_ISSUER="https://auth.echo6.co/application/o/nextcloud/"
|
|
|
|
|
|
|
|
|
|
# ARR Media Stack (arr VM on media node)
|
|
|
|
|
# Deployed: 2026-02-11 on media VM 105 (192.168.1.160)
|
|
|
|
|
# Tailscale: 100.64.0.18
|
|
|
|
|
ARR_VM_IP="192.168.1.160"
|
|
|
|
|
ARR_VM_TAILSCALE="100.64.0.18"
|
|
|
|
|
|
|
|
|
|
# Jellyfin (jellyfin.echo6.co)
|
|
|
|
|
JELLYFIN_URL="https://jellyfin.echo6.co"
|
|
|
|
|
JELLYFIN_OIDC_PROVIDER_ID=10
|
|
|
|
|
JELLYFIN_OIDC_CLIENT_ID="jellyfin"
|
|
|
|
|
JELLYFIN_OIDC_CLIENT_SECRET="gFiBubknaoKc9MPDrjm8pzC8acilxBPWn27vihsXnaiPJcwR3BiMlzhRtDs5gtpkAc5k7RAETwYOQdIJRVROpu6fZdE4H6NV8jBhr1khURnv1WIdmTM1809mTmAIkMt3"
|
|
|
|
|
JELLYFIN_OIDC_ISSUER="https://auth.echo6.co/application/o/jellyfin/"
|
|
|
|
|
|
|
|
|
|
# Jellyseer (requests.echo6.co)
|
|
|
|
|
JELLYSEER_URL="https://requests.echo6.co"
|
|
|
|
|
JELLYSEER_OIDC_PROVIDER_ID=11
|
|
|
|
|
JELLYSEER_OIDC_CLIENT_ID="jellyseer"
|
|
|
|
|
JELLYSEER_OIDC_CLIENT_SECRET="tOPLBA0xmoYjwMI5dTYxb6VllChgWhZyKEC8TRWgClTY30p0rpBZ24mmw0WJqcNZVeOvo3M3a7R2UHpHIiup76vudOQC9m863qgfe18pspyDGCW5PPaT9bvBTO8guyzg"
|
|
|
|
|
JELLYSEER_OIDC_ISSUER="https://auth.echo6.co/application/o/jellyseer/"
|
|
|
|
|
|
|
|
|
|
# PeerTube OIDC (Authentik)
|
|
|
|
|
PEERTUBE_OIDC_CLIENT_ID=1PCwaJNbOYWTxPNGwb15BX8YNXM68Bn3j1oZstfF
|
|
|
|
|
PEERTUBE_OIDC_CLIENT_SECRET=t9f2RJ6SQJNful64b5eRzBrhJs133yC8tXi8HvsdjPby9sCDPaU5Hf08qD7K8RJrOMQdg0g9UMeGc6ubIs5ikF6CykY8a2D6ZlqUtwLyA7YDUkZX8CJtntCZ23JOpT2w
|
|
|
|
|
PEERTUBE_OIDC_ISSUER=https://auth.echo6.co/application/o/peertube/
|
|
|
|
|
|
|
|
|
|
# PeerTube Instance
|
|
|
|
|
PEERTUBE_ROOT_PASSWORD=7redditGold
|
|
|
|
|
PEERTUBE_PG_PASSWORD=zMs0s9ZVHxL75h8R8QYmpefsLTbfdt
|
|
|
|
|
PEERTUBE_REDIS_PASSWORD=Rm1es6An15pAOOVh4d7hANgtptOkeJ
|
|
|
|
|
PEERTUBE_SECRET=d9c75c0fc6917e1c5c77e7066b36f34723483e0cca84a07f4774501fbfd99e3f
|
|
|
|
|
|
|
|
|
|
# Authentik No-Reply Email (no-reply@echo6.co)
|
|
|
|
|
# Created: 2026-02-16 for invitation/notification emails
|
|
|
|
|
AUTHENTIK_SMTP_USER=no-reply@echo6.co
|
|
|
|
|
AUTHENTIK_SMTP_PASS=NoReply2026Echo6
|
|
|
|
|
AUTHENTIK_SMTP_HOST=mail.echo6.co
|
|
|
|
|
AUTHENTIK_SMTP_PORT=587
|
|
|
|
|
|
|
|
|
|
# Matrix Synapse (matrix.echo6.co / element.echo6.co)
|
|
|
|
|
# Deployed: 2026-02-15 on Contabo VPS (5.189.158.149)
|
|
|
|
|
# Migrated from utility CT 108 to Contabo 2026-02-15
|
|
|
|
|
MATRIX_POSTGRES_PASSWORD=S2B3ay0CtGzNZEHvYkqnLNGOgcA1pwEk
|
|
|
|
|
MATRIX_OIDC_CLIENT_ID=93kCoZkBlnJyD9EcAm7E4btKflecOcBm9DGONB5T
|
|
|
|
|
MATRIX_OIDC_CLIENT_SECRET=Xa7CI44FXmQoGQxWQwctZR8OxET4FenueQuqH7SW0XbCSdy4Pl5hNA8lp6nxjEThwRXOSS09kmpejRMCHX8BITapsBvdzCfOn3wxjzwLp8qcVticYJdkLLC5lrGqD9aX
|
|
|
|
|
MATRIX_OIDC_ISSUER=https://auth.echo6.co/application/o/matrix/
|
|
|
|
|
MATRIX_ADMIN_USER=matt
|
|
|
|
|
MATRIX_ADMIN_PASSWORD=XzVMhUkumJwlTMVcQbLHePO
|
|
|
|
|
MATRIX_SYNAPSE_REGISTRATION_SHARED_SECRET=dK3b-vZ1+xKr5*jiNBTt2Te3h,T#:Xu.DoQPLoWBkIbTO=yJ2,
|
|
|
|
|
MATRIX_SYNAPSE_MACAROON_SECRET_KEY=+Vm:-&5X9ieUlG*;ztzK,^qDA@S#0Xl75Vb_-f:gtTyG;&df~p
|
|
|
|
|
MATRIX_MAS_SYNAPSE_SECRET=50fe2e183ed539fe630268a6af6bd59c447a09b86e4c2e939355c562b0a3c6d364761fdbf8f4f096e4500647965024d0
|
|
|
|
|
MATRIX_ARCHIVIST_BOT_PASSWORD=hm=8~gGG=@5OQv-*z*U*-ydOttcrm.L)c1;d%KF8?,?^nVRf
|
|
|
|
|
MATRIX_ARCHIVIST_BOT_ACCESS_TOKEN=mct_ueZmk9fWTUnqN8OfJKQ2tzMDDvHscg_LypEv2
|
|
|
|
|
|
|
|
|
|
# TAK Server (Contabo VPS — 5.189.158.149 / 100.64.0.1)
|
|
|
|
|
# Deployed: 2026-02-20 on Contabo VPS via Cloud-RF/tak-server wrapper
|
|
|
|
|
# Admin Portal: https://tak.echo6.co (Authentik SSO, port 8446 no client cert)
|
|
|
|
|
# Mutual TLS API: https://100.64.0.1:8443 (requires admin.p12)
|
|
|
|
|
# SIGIL Console: https://tak.echo6.co/sigil (Authentik SSO)
|
|
|
|
|
# Certs: /opt/tak-server-deploy/tak/certs/files/
|
|
|
|
|
TAK_URL="https://tak.echo6.co"
|
|
|
|
|
TAK_SIGIL_URL="https://tak.echo6.co/sigil"
|
|
|
|
|
TAK_ADMIN_USER=admin
|
|
|
|
|
TAK_ADMIN_PASSWORD=7redditGold-Tak1
|
|
|
|
|
TAK_POSTGRES_PASSWORD=4eEPvhC92yIMeh1!
|
|
|
|
|
TAK_CERT_PASSWORD=atakatak
|
|
|
|
|
TAK_INSTALL_PATH=/opt/tak-server-deploy
|
|
|
|
|
TAK_SIGIL_PORT=8990
|
|
|
|
|
|
|
|
|
|
# mt-isr (Meshtastic Node — ISR Site)
|
|
|
|
|
# Raspberry Pi Zero 2 W, Debian 13 (trixie), 416MB RAM, 115GB SD
|
|
|
|
|
# Local IP: 192.168.1.141 (WiFi, DHCP), Serial: /dev/ttyACM0
|
|
|
|
|
# IdahoMesh Tailscale: 100.100.0.5 (nebra user)
|
|
|
|
|
# WiFi hotspot: ISR-MESH (192.168.4.0/24), G2 at 192.168.4.241
|
|
|
|
|
# meshtasticd removed (not needed — G2 managed via WiFi TCP, not local daemon)
|
|
|
|
|
# Station G2 managed via TCP at 192.168.4.241 through WiFi bridge
|
|
|
|
|
MT_ISR_IP="192.168.1.141"
|
|
|
|
|
MT_ISR_SSH_USER="isr"
|
|
|
|
|
MT_ISR_SSH_PASS="UfPsfwyMIUIKb1"
|
|
|
|
|
|
|
|
|
|
# GitHub (github.com/zvx-echo6)
|
|
|
|
|
# Fine-grained PAT for advBBS repo push
|
|
|
|
|
GITHUB_PAT=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
|
|
|
|
|
|
|
|
|
|
# MMUD — Mesh Multi-User Dungeon (mmud.echo6.co)
|
|
|
|
|
# Deployed: 2026-02-25 on utility (CT 109 game daemon, CT 111-116 SIM nodes)
|
|
|
|
|
# Dashboard: https://mmud.echo6.co
|
|
|
|
|
# Admin: https://mmud.echo6.co/admin
|
|
|
|
|
MMUD_URL="https://mmud.echo6.co"
|
|
|
|
|
MMUD_WEB_SECRET="194bc59df6e1734d73cacaf1c82f3298fac207dc23af6d6798b9bd3241c196a9"
|
|
|
|
|
MMUD_ADMIN_PASSWORD="5lJOhU87uEtubBe1hRcPGg"
|
|
|
|
|
MMUD_COMPOSE_PATH="/opt/mmud/docker-compose.yml"
|
|
|
|
|
|
|
|
|
|
# matt-desktop (Windows PC)
|
|
|
|
|
# Local IP: 192.168.1.111, Tailscale: 100.64.0.10
|
|
|
|
|
# SSH requires: -o PreferredAuthentications=password -o PubkeyAuthentication=no
|
|
|
|
|
MATT_DESKTOP_IP="192.168.1.111"
|
|
|
|
|
MATT_DESKTOP_TS="100.64.0.10"
|
|
|
|
|
MATT_DESKTOP_SSH_USER="administrator"
|
|
|
|
|
MATT_DESKTOP_SSH_PASS="Qw1290opzx"
|
|
|
|
|
|
|
|
|
|
# Echo6 Matrix Agents
|
|
|
|
|
# Space: echo6-ops
|
|
|
|
|
# Cortex Agent: @cortex:echo6.co on cortex (systemd: echo6-agent.service)
|
|
|
|
|
# Contabo Agent: @contabo:echo6.co on Contabo (systemd: echo6-agent.service)
|
|
|
|
|
# MAS User IDs: cortex=01KKY68CV3KSJAPG11SZE3T0SV, contabo=01KKY68FSS6B6T56C8BS94K2H5
|
|
|
|
|
MATRIX_CORTEX_USER="@cortex:echo6.co"
|
|
|
|
|
MATRIX_CORTEX_PASSWORD="~vfnqEOHLcjbMmX1-t7GXZrCqyqwQn5d"
|
|
|
|
|
MATRIX_CONTABO_USER="@contabo:echo6.co"
|
|
|
|
|
MATRIX_CONTABO_PASSWORD="4i,ysuy2ZWk*9ndNICOrp4cIMpE(Teit"
|
|
|
|
|
# Legacy agent (to be deactivated)
|
|
|
|
|
MATRIX_AGENT_USER="@agent:echo6.co"
|
|
|
|
|
MATRIX_AGENT_PASSWORD="WBYVL-o)VO%uV^4YHWni=oDNC76BPaN)"
|
|
|
|
|
MATRIX_AGENT_MAS_ID="01KKX88ARGK0BTA1JMB2QVAW4C"
|
|
|
|
|
|
|
|
|
|
# Scribd (scribd.com)
|
|
|
|
|
SCRIBD_USER="matt@echo6.co"
|
|
|
|
|
SCRIBD_PASS="7redditGold"
|
|
|
|
|
|
|
|
|
|
# Anna's Archive (annas-archive.gs / .pk / .gd)
|
|
|
|
|
# Member API key for fast downloads (bypasses DDoS-Guard)
|
|
|
|
|
AA_KEY="y7ADrA9VPZb6ix7CWZbnJc6BiUFMs"
|
|
|
|
|
|
|
|
|
|
# Internet Archive (archive.org)
|
|
|
|
|
IA_USER="matt@echo6.co"
|
|
|
|
|
IA_PASS="7redditGold"
|
|
|
|
|
IA_S3_ACCESS="vw9g0hyfALvjsOWl"
|
|
|
|
|
IA_S3_SECRET="nfY7TOe8mweBWaWo"
|
|
|
|
|
IA_SCREENNAME="matecho"
|
|
|
|
|
|
|
|
|
|
# TomTom Maps API
|
|
|
|
|
TOMTOM_API_KEY=4IvvwRYgTL5LCdWVVVW1iyAL6o9CD3wT
|
|
|
|
|
|
|
|
|
|
# Google Places API
|
|
|
|
|
GOOGLE_PLACES_KEY=AIzaSyB6gJ6RJisarF29GtJks_9SUHLm5o1d_tY
|
|
|
|
|
|
|
|
|
|
# Central LXC — Data Hub (192.168.1.104 / 100.64.0.12 / central.echo6.mesh)
|
|
|
|
|
# PostgreSQL 16 + TimescaleDB 2.27 + PostGIS 3.4
|
|
|
|
|
CENTRAL_PG_HOST="192.168.1.104"
|
|
|
|
|
CENTRAL_PG_PORT="5432"
|
|
|
|
|
CENTRAL_PG_DATABASE="central"
|
|
|
|
|
CENTRAL_PG_USER="central"
|
|
|
|
|
CENTRAL_PG_PASSWORD="3LNVFQJHsK3e7dOcAdvK3oS6d70f"
|
|
|
|
|
CENTRAL_PG_DSN="postgresql://central:3LNVFQJHsK3e7dOcAdvK3oS6d70f@localhost/central"
|
|
|
|
|
|
|
|
|
|
# Central Data Hub Master Key
|
|
|
|
|
CENTRAL_MASTER_KEY=jfooDHnsS8n5J61bDzmiq6u7QpJhUoEQ/BVk1Sj3PqE=
|
|
|
|
|
|
2026-06-29 06:00:08 +00:00
|
|
|
# Central GUI operator login (http://central.echo6.mesh:8000)
|
|
|
|
|
CENTRAL_OPERATOR_USER="admin"
|
|
|
|
|
CENTRAL_OPERATOR_PASS="7redditGold"
|
|
|
|
|
|
2026-06-15 20:10:52 +00:00
|
|
|
# Recon VM (CT 1130) — padus PostgreSQL (192.168.1.130 / recon-vm)
|
|
|
|
|
# PostgreSQL 16, opened for LAN 2026-05-24 — scram-sha-256, allow 192.168.1.0/24
|
|
|
|
|
RECON_PG_HOST=192.168.1.130
|
|
|
|
|
RECON_PG_PORT=5432
|
|
|
|
|
RECON_PG_DATABASE=padus
|
|
|
|
|
RECON_PG_USER=zvx
|
|
|
|
|
RECON_PG_PASSWORD=ce70f1d52fad2264427d4db9b3c1036568c3b6ea0dd80e00
|
|
|
|
|
|
|
|
|
|
# 511 Idaho Traffic API (511.idaho.gov)
|
|
|
|
|
IDAHO_511_API_KEY=5af12fb5fdc743e0ae0b041bc4c47f2d
|
2026-06-16 18:00:07 +00:00
|
|
|
|
|
|
|
|
# edge2 PVE host root@pam password (set 2026-06-16 — for PDM remote-add + break-glass)
|
|
|
|
|
EDGE2_ROOT_PASSWORD=rAWdarLXCsTVnEQCmGxX
|
2026-06-17 00:00:14 +00:00
|
|
|
|
|
|
|
|
# intermountainmesh.com WordPress (edge2 CT 101, 10.10.10.11)
|
|
|
|
|
# Deployed: 2026-06-16
|
|
|
|
|
WP_IMESH_DB_ROOT_PW=BenH5nw7Y25k2xtrXfXcapt4xLzsQC2W
|
|
|
|
|
WP_IMESH_DB_USER=wp_user
|
|
|
|
|
WP_IMESH_DB_PASSWORD=9cnwfhQzkdyfU8C3yodIXu_IA1PUOawr
|
|
|
|
|
WP_IMESH_DB_NAME=wordpress
|
|
|
|
|
# WordPress admin credentials: set during browser setup wizard at https://intermountainmesh.com
|
2026-06-20 06:00:08 +00:00
|
|
|
|
|
|
|
|
# Proxmox Datacenter Manager (PDM) — Break-glass local admin (edge2 CT 100, 100.64.0.28:8443)
|
|
|
|
|
# PAM realm: Linux user on CT100, independent of Authentik SSO
|
|
|
|
|
# Backup taken: /root/access.bak-2026-06-20 (inside CT100)
|
|
|
|
|
PDM_URL="https://pdm.echo6.co"
|
|
|
|
|
PDM_BREAKGLASS_USER="admin@pam"
|
|
|
|
|
PDM_BREAKGLASS_PASS="7redditGold"
|
2026-07-04 00:00:06 +00:00
|
|
|
|
2026-07-14 18:00:17 +00:00
|
|
|
# Conduit GUI admin login (http://100.64.0.12:8010/login) — CT 104
|
2026-07-15 06:00:18 +00:00
|
|
|
# Recreated 2026-07-15 via conduit-admin create-operator (full DB rebuild; old operator gone)
|
2026-07-14 18:00:17 +00:00
|
|
|
CONDUIT_GUI_URL="http://100.64.0.12:8010/login"
|
|
|
|
|
CONDUIT_GUI_USER="admin"
|
2026-07-15 06:00:18 +00:00
|
|
|
CONDUIT_GUI_PASS="7redditGold"
|
2026-07-14 18:00:17 +00:00
|
|
|
|
2026-07-04 00:00:06 +00:00
|
|
|
# ARGUS web UI (https://argus.echo6.co) — utility CT 101 Caddy, HTTP basic auth
|
|
|
|
|
# Backend: ARGUS app CT 103 tailnet 100.64.0.25:8090. Added 2026-07-03.
|
|
|
|
|
# Only the bcrypt hash lives in the Caddyfile; this is the plaintext.
|
|
|
|
|
ARGUS_WEB_URL="https://argus.echo6.co"
|
|
|
|
|
ARGUS_WEB_USER="idaho"
|
|
|
|
|
ARGUS_WEB_PASS="lads"
|
