# Infrastructure API Credentials # IMPORTANT: Keep this file secure and never commit to git # SSH Access (all servers) SSH_USER=zvx SSH_PASSWORD=7redditGold ROOT_PASSWORD=7redditGold # GoDaddy DNS API GODADDY_API_KEY=dKiSoC24ZLTR_3KkMjFyYrzgChk1JHjNLnU GODADDY_API_SECRET=ExCGBASgSrN4A2mP4daU4G # Authentik SSO Platform (https://auth.echo6.co) — migrated to edge2 CT 105 / 10.10.10.23 / tailnet 100.64.0.36 on 2026-06-18 AUTHENTIK_API_TOKEN=YG24Zu7c7JNhrfC564N2NvJt2HmIr6Jyi9BgV629XGAZC70hvGbyNz8i4l7w AUTHENTIK_URL=https://auth.echo6.co # Admin credentials for web UI/API access AUTHENTIK_ADMIN_USER=akadmin AUTHENTIK_ADMIN_PASSWORD=Mue8FI4sRe2ihRzsmypPnQlpDiae6hqHXZafV2n5CTNPJT1JaS6oqYZzbeGu # Wiki.js Documentation Platform (https://docs.echo6.co) WIKIJS_ADMIN_EMAIL=akadmin@echo6.co WIKIJS_ADMIN_PASSWORD=xh5Q+hWzUe5EqvBQ1tWULlOiPMZX WIKIJS_URL=https://docs.echo6.co # Forgejo Git Forge (https://forge.echo6.co) FORGEJO_API_TOKEN=043fd2df4731a2bb8a2b8352018031bd454fe9a1 FORGEJO_URL=https://forge.echo6.co # Usage Notes: # - GoDaddy API: Used for automated DNS record management # - Authentik API: Used for SSO provider/application configuration # - Forgejo API: Used for repository mirroring and automation (ALL PERMISSIONS) # - File Location: /home/zvx/projects/selfhosting/.credentials # - For agents: Source this file with: source /home/zvx/projects/selfhosting/.credentials WIKIJS_API_TOKEN=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcGkiOjIsImdycCI6MSwiaWF0IjoxNzYzOTYxNzUxLCJleHAiOjE3OTU1MTkzNTEsImF1ZCI6InVybjp3aWtpLmpzIiwiaXNzIjoidXJuOndpa2kuanMifQ.LR4qDHT1d8PgwVCo7o8hCbAK19vas5vnROa2IT8InseHh7RwJbnyfc4u71PMzDcIoYJ1QHVeAxhv4SJbkYj-F7b525M63xGuji1pUpxkEaxbZe1iFeQVojSvPvBcw0ZCqMzKtgYNivpSnn9psQulDSFD7Kq63FVte1ABMHeh-s-Mfeqn4pzmgRAMRHZC9l6MSA_cTZ97gxeJCKn9Jyh0LyrQJXYeL0gFG5FvAwOMYDf5fiAmz4Ocyxg4ZMz3q-6Ao9dfB41zbD5WbYwI0qm7wOBDRj3-1-JjMrPJrgYpUOqEuOH1SRDt7VUrOvbxqE7AAM0J8o-7pnVNw1HaseqEiQ # Obsidian LiveSync (https://notes.echo6.co) # CouchDB + provisioner on Contabo (5.189.158.149), JWT auth LIVESYNC_COUCHDB_USER=admin LIVESYNC_COUCHDB_PASSWORD=kGJkZzoVc5eMiu0rGKJgJNyq LIVESYNC_PROXY_SECRET=d41933ea00ffb620fa4bb96e0177b3869998c698f5dd7892b86a33fbf8e5aff9 LIVESYNC_URL=https://notes.echo6.co # Config location: Contabo:/opt/livesync/ # Open WebUI SSO (ai.echo6.co) OPEN_WEBUI_OAUTH_CLIENT_ID=open-webui OPEN_WEBUI_OAUTH_CLIENT_SECRET=MfajNL6QZDfDOKprBdYzu3rDya2BoiB5siWt5cYQH1o3zif8ivZ2ZF2HehE3UqLZq2nflwVdYZNhw4tkWQj8kF0dLGA0qDYbBVtUcvtj2AQKQTqAEdRfQF0Oi3slL9OI OPEN_WEBUI_AUTHENTIK_PROVIDER_ID=14 # Open WebUI API Key (for content sync) OPENWEBUI_API_KEY=sk-dbf4c9e6ac915d8151f84bf09e51cf2c03e943918adb1737 OPENWEBUI_API_URL=http://192.168.1.239:3000 # PeerTube (stream.echo6.co) PEERTUBE_URL="https://stream.echo6.co" PEERTUBE_ADMIN_USER="root" PEERTUBE_ADMIN_PASSWORD="7redditGold" PEERTUBE_ADMIN_EMAIL="admin@echo6.co" # Echo6 Portal - https://echo6.co # Deployed: Echo6-Cloud (192.168.1.241:3002) ECHO6_PORTAL_ADMIN_USER=admin ECHO6_PORTAL_ADMIN_EMAIL=admin@echo6.co ECHO6_PORTAL_ADMIN_PASS=7redditGold # Authentik OAuth2 Provider ECHO6_PORTAL_OIDC_CLIENT_ID=echo6-portal ECHO6_PORTAL_OIDC_CLIENT_SECRET=15vviNjbzbrtG3WvZxkKrLZv97tcsdzHqWcExp4HarlFlxWInZcKSLixdDWwod67zYxYBDqxkqNR4PNIK0A0XhJSGG6LLK7UHwI1xKeUQt7Dx6bVnDZvqkGP28ewYb4c ECHO6_PORTAL_OIDC_ISSUER=https://auth.echo6.co/application/o/echo6-portal/ # Stalwart Mail Server — DECOMMISSIONED # Was deployed 2025-12-19, removed. Authentik provider PK 53 may still exist. # Credentials retained for reference only. # STALWART_ADMIN_USER=admin # STALWART_ADMIN_PASS=ECu0Q4zsQN # NordVPN (PeerTube Pipeline IP Rotation) # Installed on media CT 110 (192.168.1.170) # Service: nordvpnd.service (enabled, auto-start) # Token: logged in via `nordvpn login --token ` — token not stored in file # Note: NordVPN token was entered interactively, re-login if needed NORDVPN_LOCATION="CT 110 (media)" # edge1 SSH Access (rebuilt Contabo VPS, mail-only, 2026-06-19) # Server: edge1 — Debian 12 + Proxmox 8.4.19, mail-only role # Public IP: 5.189.158.149 | Tailscale: 100.64.0.40 (node: contabo) # SSH key: ~/.ssh/contabo2_ed25519 (same key as before rebuild) # Box password (unrotated): 7redditGold # ssh -i ~/.ssh/contabo2_ed25519 root@5.189.158.149 EDGE1_SSH_USER=root EDGE1_SSH_KEY=~/.ssh/contabo2_ed25519 EDGE1_SSH_PASS=7redditGold EDGE1_PUBLIC_IP=5.189.158.149 EDGE1_TAILSCALE_IP=100.64.0.40 # Mailcow (mail.echo6.co) — now on edge1 CT 101 (10.10.10.2), updated commit 52a41b4d (SOGo 5.12.8) # Deployed: 2026-06-19 rebuild (privileged LXC on edge1 Proxmox) # Access: via host Caddy (mail/autodiscover/autoconfig.echo6.co) + host DNAT (ports 25/465/587/110/143/993/995/4190 → 10.10.10.2) # Admin UI: https://mail.echo6.co (same as before) # mail_crypt keys (dovecot crypt volume: data/conf/dovecot/): # Primary key: ecprivkey.pem (original; must be preserved across rebuilds) # Secondary key: ecprivkey.pem.fresh-20260619 (generated by restore; loaded alongside primary) # Config: data/conf/dovecot/extra.conf (update-safe, not dovecot.conf) # Both keys loaded — required to decrypt old mail encrypted with primary and new mail with secondary MAILCOW_ADMIN_USER=admin MAILCOW_ADMIN_PASS=7redditGold # RECON Pipeline Email Alerts (recon@echo6.co) # Deployed: 2026-02-01 on Media-Server for pipeline monitoring RECON_SMTP_USER=recon@echo6.co RECON_SMTP_PASS=LezU3TJ2W8JFj0hXHcJe RECON_SMTP_HOST=mail.echo6.co RECON_SMTP_PORT=587 # Forgejo (forge.echo6.co) - Deployed 2026-02-04 # Migrated to edge2 CT 103 (10.10.10.21 / tailnet 100.64.0.34) on 2026-06-16; SSH via Contabo iptables DNAT (forgejo-ssh-dnat.service). FORGEJO_URL="https://forge.echo6.co" FORGEJO_ADMIN_USER="matt" FORGEJO_ADMIN_PASS="7redditGold" FORGEJO_SSH_PORT="2222" FORGEJO_DB_NAME=forgejo FORGEJO_DB_USER=forgejo FORGEJO_DB_PASS="forgejo_db_pass_2026" # Forgejo OAuth2 (Authentik) FORGEJO_OAUTH_CLIENT_ID="forgejo" FORGEJO_OAUTH_CLIENT_SECRET="cUEZgNGfsmoPSvAjM8Y3xOLOAHOg5umaZJBFFPOIWLXSkdezEz5x1lXwV2mhYI89P1XfWihkBBrfnpctSYGeTMJO0DhNb6GYNCRZyHue61wvBJT4yIb68gdOY0NBkv4g" # Authentik API Token (Contabo instance) - claude-api-token (regenerated 2026-02-16 for 2025.12 upgrade) AUTHENTIK_API_TOKEN="YG24Zu7c7JNhrfC564N2NvJt2HmIr6Jyi9BgV629XGAZC70hvGbyNz8i4l7w" # Freq51.net MQTT Feeder (Meshtastic) # Feeder: AIDA-N2 (Node ID: 27780c47) # Malla: https://malla-aida-n2.freq51.net # Meshview: https://meshview-aida-n2.freq51.net FREQ51_MQTT_USER="aida-n2" FREQ51_MQTT_PASS="handwash6unplan3ned-muMbo" FREQ51_MQTT_BROKER="mqtt.freq51.net" FREQ51_MQTT_PORT="1883" # MeshMonitor (Meshtastic Mesh Monitoring) # Location: utility CT 100 (192.168.1.100:8080) # Tailscale: 100.64.0.1:8080 # Updated: 2026-02-04 MESHMONITOR_URL="http://192.168.1.100:8080" MESHMONITOR_TAILSCALE_URL="http://100.64.0.1:8080" MESHMONITOR_ADMIN_USER="admin" MESHMONITOR_ADMIN_PASS="7redditGold" # Vaultwarden (Password Manager) # Deployed: 2026-02-05 on Contabo VPS # URL: https://vault.echo6.co # Local-login account (verified Phase 0a 2026-06-16): matt@echo6.co — master password is SET; Matt has confirmed he knows it. # SSO_ONLY=false → local email + master-password login works independent of Authentik. # Master password is Matt's own secret — NOT stored here (Vaultwarden keeps only the PBKDF2/Argon2 hash; unrecoverable). VAULTWARDEN_URL="https://vault.echo6.co" VAULTWARDEN_ADMIN_TOKEN="lHYCnZvETLirtRYCTICM6i6s2yYbMFjW3CkHwxnO1Brqe6vIq0zKNwF01IWB01" VAULTWARDEN_ADMIN_URL="https://vault.echo6.co/admin" # Vaultwarden SSO (Authentik) VAULTWARDEN_OIDC_PROVIDER_ID=3 VAULTWARDEN_OIDC_CLIENT_ID="vaultwarden" VAULTWARDEN_OIDC_CLIENT_SECRET="NALriNOTOkCjOA0w02MZWsoRUL9H0pT6eTNBYHsDueeL8sRkAEvG4RADrtcqWrIHi5Zur30CFTOQ3barjAnseQrzA4vrpVEmi1gJVqbWk9llkXOlixI8QMRSKNO4fXGi" VAULTWARDEN_OIDC_ISSUER="https://auth.echo6.co/application/o/vaultwarden/" # Proxmox VE SSO (Authentik OIDC) # Deployed: 2026-02-05 # Realm: authentik PROXMOX_OIDC_CLIENT_ID="proxmox" PROXMOX_OIDC_CLIENT_SECRET="NlpHwyRhY9hMO6j6VtakSyt5M05a0x6WXMDwOFcqRcTVSBPKU8aOVRyIhYq6gJUiBW3e7Qy7z0zR0URZxK0e3BDN0i6hOAIBLZYGrx1jjjQFiIjlmk9e9R8ypOngtmVD" PROXMOX_OIDC_ISSUER="https://auth.echo6.co/application/o/proxmox/" PROXMOX_OIDC_PROVIDER_ID=4 # Headscale VPN (vpn.echo6.co) # Deployed: 2026-02-05 on Contabo VPS HEADSCALE_URL="https://vpn.echo6.co" HEADSCALE_OIDC_CLIENT_ID="headscale" HEADSCALE_OIDC_CLIENT_SECRET="lnwpTYerBQQkPIsNIYGpyFgM9zAbyAWOhvH27BSPY0JGZweAaNJWkgINMi6ePQtSdUDEHOWeUQynoDZynVbqfv68352PGcrU0nh8MWVM4Djif5akcCN9TtGPCiaLlMcL" HEADSCALE_OIDC_ISSUER="https://auth.echo6.co/application/o/headscale/" HEADSCALE_OIDC_PROVIDER_ID=5 # Headplane Admin UI (vpn.echo6.co/admin) # First OIDC login gets Owner permissions HEADPLANE_URL="https://vpn.echo6.co/admin" HEADPLANE_OIDC_CLIENT_ID="headplane" HEADPLANE_OIDC_CLIENT_SECRET="PYWFFLm8z8GiDA7keUbZMDFVyN6l11pBrgKeqTaLUyOsdSV7AZdW8JUXfGdcPI1jIE4ecaZy0WIyazKzFc89LtSHVkQKQHkBYpo5jRTmP5aXyiQmN8lSdqWlEEVEhk8m" HEADPLANE_OIDC_ISSUER="https://auth.echo6.co/application/o/headplane/" HEADPLANE_OIDC_PROVIDER_ID=6 HEADPLANE_API_KEY="hskey-api--6r1vFn_Dx0l-NVvEosw22IKFOvtjZ4Uc2U-IfWZQJOiyCtg7j-6q2UmQl5bDY4UlN9jWYaaKYma6" # Immich Photo Management (immich.echo6.co) # Deployed: 2026-02-11 on cloud CT 120 (192.168.1.182) # Tailscale: 100.64.0.2 # NFS storage: pi-nas:/export/immich IMMICH_URL="https://immich.echo6.co" IMMICH_DB_PASSWORD="wKe7rUrxYkncA0Wo6jjx2AeI29i4UWn" IMMICH_COMPOSE_PATH="/opt/immich/docker-compose.yml" # Nextcloud AIO (nextcloud.echo6.co) # Deployed: 2026-02-11 on cloud CT 121 (192.168.1.183) # Tailscale: 100.64.0.11 # NFS storage: pi-nas:/export/nextcloud NEXTCLOUD_URL="https://nextcloud.echo6.co" NEXTCLOUD_AIO_UI="https://192.168.1.183:8080" NEXTCLOUD_OIDC_PROVIDER_ID=8 NEXTCLOUD_OIDC_CLIENT_ID="nextcloud" NEXTCLOUD_OIDC_CLIENT_SECRET="yw4NVaIcD65HLkVeC5QjiDjhsJeci2EHDuc7X1D1299AFhgVpbckWnRL7TkNfCUydJ1t11axUuWrp9OzygNdfmhkpev8hhA8QEFBxsTb95pwrFhvXTfydpHTrm3EpUdT" NEXTCLOUD_OIDC_ISSUER="https://auth.echo6.co/application/o/nextcloud/" # ARR Media Stack (arr VM on media node) # Deployed: 2026-02-11 on media VM 105 (192.168.1.160) # Tailscale: 100.64.0.18 ARR_VM_IP="192.168.1.160" ARR_VM_TAILSCALE="100.64.0.18" # Jellyfin (jellyfin.echo6.co) JELLYFIN_URL="https://jellyfin.echo6.co" JELLYFIN_OIDC_PROVIDER_ID=10 JELLYFIN_OIDC_CLIENT_ID="jellyfin" JELLYFIN_OIDC_CLIENT_SECRET="gFiBubknaoKc9MPDrjm8pzC8acilxBPWn27vihsXnaiPJcwR3BiMlzhRtDs5gtpkAc5k7RAETwYOQdIJRVROpu6fZdE4H6NV8jBhr1khURnv1WIdmTM1809mTmAIkMt3" JELLYFIN_OIDC_ISSUER="https://auth.echo6.co/application/o/jellyfin/" # Jellyseer (requests.echo6.co) JELLYSEER_URL="https://requests.echo6.co" JELLYSEER_OIDC_PROVIDER_ID=11 JELLYSEER_OIDC_CLIENT_ID="jellyseer" JELLYSEER_OIDC_CLIENT_SECRET="tOPLBA0xmoYjwMI5dTYxb6VllChgWhZyKEC8TRWgClTY30p0rpBZ24mmw0WJqcNZVeOvo3M3a7R2UHpHIiup76vudOQC9m863qgfe18pspyDGCW5PPaT9bvBTO8guyzg" JELLYSEER_OIDC_ISSUER="https://auth.echo6.co/application/o/jellyseer/" # PeerTube OIDC (Authentik) PEERTUBE_OIDC_CLIENT_ID=1PCwaJNbOYWTxPNGwb15BX8YNXM68Bn3j1oZstfF PEERTUBE_OIDC_CLIENT_SECRET=t9f2RJ6SQJNful64b5eRzBrhJs133yC8tXi8HvsdjPby9sCDPaU5Hf08qD7K8RJrOMQdg0g9UMeGc6ubIs5ikF6CykY8a2D6ZlqUtwLyA7YDUkZX8CJtntCZ23JOpT2w PEERTUBE_OIDC_ISSUER=https://auth.echo6.co/application/o/peertube/ # PeerTube Instance PEERTUBE_ROOT_PASSWORD=7redditGold PEERTUBE_PG_PASSWORD=zMs0s9ZVHxL75h8R8QYmpefsLTbfdt PEERTUBE_REDIS_PASSWORD=Rm1es6An15pAOOVh4d7hANgtptOkeJ PEERTUBE_SECRET=d9c75c0fc6917e1c5c77e7066b36f34723483e0cca84a07f4774501fbfd99e3f # Authentik No-Reply Email (no-reply@echo6.co) # Created: 2026-02-16 for invitation/notification emails AUTHENTIK_SMTP_USER=no-reply@echo6.co AUTHENTIK_SMTP_PASS=NoReply2026Echo6 AUTHENTIK_SMTP_HOST=mail.echo6.co AUTHENTIK_SMTP_PORT=587 # Matrix Synapse (matrix.echo6.co / element.echo6.co) # Deployed: 2026-02-15 on Contabo VPS (5.189.158.149) # Migrated from utility CT 108 to Contabo 2026-02-15 MATRIX_POSTGRES_PASSWORD=S2B3ay0CtGzNZEHvYkqnLNGOgcA1pwEk MATRIX_OIDC_CLIENT_ID=93kCoZkBlnJyD9EcAm7E4btKflecOcBm9DGONB5T MATRIX_OIDC_CLIENT_SECRET=Xa7CI44FXmQoGQxWQwctZR8OxET4FenueQuqH7SW0XbCSdy4Pl5hNA8lp6nxjEThwRXOSS09kmpejRMCHX8BITapsBvdzCfOn3wxjzwLp8qcVticYJdkLLC5lrGqD9aX MATRIX_OIDC_ISSUER=https://auth.echo6.co/application/o/matrix/ MATRIX_ADMIN_USER=matt MATRIX_ADMIN_PASSWORD=XzVMhUkumJwlTMVcQbLHePO MATRIX_SYNAPSE_REGISTRATION_SHARED_SECRET=dK3b-vZ1+xKr5*jiNBTt2Te3h,T#:Xu.DoQPLoWBkIbTO=yJ2, MATRIX_SYNAPSE_MACAROON_SECRET_KEY=+Vm:-&5X9ieUlG*;ztzK,^qDA@S#0Xl75Vb_-f:gtTyG;&df~p MATRIX_MAS_SYNAPSE_SECRET=50fe2e183ed539fe630268a6af6bd59c447a09b86e4c2e939355c562b0a3c6d364761fdbf8f4f096e4500647965024d0 MATRIX_ARCHIVIST_BOT_PASSWORD=hm=8~gGG=@5OQv-*z*U*-ydOttcrm.L)c1;d%KF8?,?^nVRf MATRIX_ARCHIVIST_BOT_ACCESS_TOKEN=mct_ueZmk9fWTUnqN8OfJKQ2tzMDDvHscg_LypEv2 # TAK Server (Contabo VPS — 5.189.158.149 / 100.64.0.1) # Deployed: 2026-02-20 on Contabo VPS via Cloud-RF/tak-server wrapper # Admin Portal: https://tak.echo6.co (Authentik SSO, port 8446 no client cert) # Mutual TLS API: https://100.64.0.1:8443 (requires admin.p12) # SIGIL Console: https://tak.echo6.co/sigil (Authentik SSO) # Certs: /opt/tak-server-deploy/tak/certs/files/ TAK_URL="https://tak.echo6.co" TAK_SIGIL_URL="https://tak.echo6.co/sigil" TAK_ADMIN_USER=admin TAK_ADMIN_PASSWORD=7redditGold-Tak1 TAK_POSTGRES_PASSWORD=4eEPvhC92yIMeh1! TAK_CERT_PASSWORD=atakatak TAK_INSTALL_PATH=/opt/tak-server-deploy TAK_SIGIL_PORT=8990 # mt-isr (Meshtastic Node — ISR Site) # Raspberry Pi Zero 2 W, Debian 13 (trixie), 416MB RAM, 115GB SD # Local IP: 192.168.1.141 (WiFi, DHCP), Serial: /dev/ttyACM0 # IdahoMesh Tailscale: 100.100.0.5 (nebra user) # WiFi hotspot: ISR-MESH (192.168.4.0/24), G2 at 192.168.4.241 # meshtasticd removed (not needed — G2 managed via WiFi TCP, not local daemon) # Station G2 managed via TCP at 192.168.4.241 through WiFi bridge MT_ISR_IP="192.168.1.141" MT_ISR_SSH_USER="isr" MT_ISR_SSH_PASS="UfPsfwyMIUIKb1" # GitHub (github.com/zvx-echo6) # Fine-grained PAT for advBBS repo push GITHUB_PAT=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 # MMUD — Mesh Multi-User Dungeon (mmud.echo6.co) # Deployed: 2026-02-25 on utility (CT 109 game daemon, CT 111-116 SIM nodes) # Dashboard: https://mmud.echo6.co # Admin: https://mmud.echo6.co/admin MMUD_URL="https://mmud.echo6.co" MMUD_WEB_SECRET="194bc59df6e1734d73cacaf1c82f3298fac207dc23af6d6798b9bd3241c196a9" MMUD_ADMIN_PASSWORD="5lJOhU87uEtubBe1hRcPGg" MMUD_COMPOSE_PATH="/opt/mmud/docker-compose.yml" # matt-desktop (Windows PC) # Local IP: 192.168.1.111, Tailscale: 100.64.0.10 # SSH requires: -o PreferredAuthentications=password -o PubkeyAuthentication=no MATT_DESKTOP_IP="192.168.1.111" MATT_DESKTOP_TS="100.64.0.10" MATT_DESKTOP_SSH_USER="administrator" MATT_DESKTOP_SSH_PASS="Qw1290opzx" # Echo6 Matrix Agents # Space: echo6-ops # Cortex Agent: @cortex:echo6.co on cortex (systemd: echo6-agent.service) # Contabo Agent: @contabo:echo6.co on Contabo (systemd: echo6-agent.service) # MAS User IDs: cortex=01KKY68CV3KSJAPG11SZE3T0SV, contabo=01KKY68FSS6B6T56C8BS94K2H5 MATRIX_CORTEX_USER="@cortex:echo6.co" MATRIX_CORTEX_PASSWORD="~vfnqEOHLcjbMmX1-t7GXZrCqyqwQn5d" MATRIX_CONTABO_USER="@contabo:echo6.co" MATRIX_CONTABO_PASSWORD="4i,ysuy2ZWk*9ndNICOrp4cIMpE(Teit" # Legacy agent (to be deactivated) MATRIX_AGENT_USER="@agent:echo6.co" MATRIX_AGENT_PASSWORD="WBYVL-o)VO%uV^4YHWni=oDNC76BPaN)" MATRIX_AGENT_MAS_ID="01KKX88ARGK0BTA1JMB2QVAW4C" # Scribd (scribd.com) SCRIBD_USER="matt@echo6.co" SCRIBD_PASS="7redditGold" # Anna's Archive (annas-archive.gs / .pk / .gd) # Member API key for fast downloads (bypasses DDoS-Guard) AA_KEY="y7ADrA9VPZb6ix7CWZbnJc6BiUFMs" # Internet Archive (archive.org) IA_USER="matt@echo6.co" IA_PASS="7redditGold" IA_S3_ACCESS="vw9g0hyfALvjsOWl" IA_S3_SECRET="nfY7TOe8mweBWaWo" IA_SCREENNAME="matecho" # TomTom Maps API TOMTOM_API_KEY=4IvvwRYgTL5LCdWVVVW1iyAL6o9CD3wT # Google Places API GOOGLE_PLACES_KEY=AIzaSyB6gJ6RJisarF29GtJks_9SUHLm5o1d_tY # Central LXC — Data Hub (192.168.1.104 / 100.64.0.12 / central.echo6.mesh) # PostgreSQL 16 + TimescaleDB 2.27 + PostGIS 3.4 CENTRAL_PG_HOST="192.168.1.104" CENTRAL_PG_PORT="5432" CENTRAL_PG_DATABASE="central" CENTRAL_PG_USER="central" CENTRAL_PG_PASSWORD="3LNVFQJHsK3e7dOcAdvK3oS6d70f" CENTRAL_PG_DSN="postgresql://central:3LNVFQJHsK3e7dOcAdvK3oS6d70f@localhost/central" # Central Data Hub Master Key CENTRAL_MASTER_KEY=jfooDHnsS8n5J61bDzmiq6u7QpJhUoEQ/BVk1Sj3PqE= # Recon VM (CT 1130) — padus PostgreSQL (192.168.1.130 / recon-vm) # PostgreSQL 16, opened for LAN 2026-05-24 — scram-sha-256, allow 192.168.1.0/24 RECON_PG_HOST=192.168.1.130 RECON_PG_PORT=5432 RECON_PG_DATABASE=padus RECON_PG_USER=zvx RECON_PG_PASSWORD=ce70f1d52fad2264427d4db9b3c1036568c3b6ea0dd80e00 # 511 Idaho Traffic API (511.idaho.gov) IDAHO_511_API_KEY=5af12fb5fdc743e0ae0b041bc4c47f2d # edge2 PVE host root@pam password (set 2026-06-16 — for PDM remote-add + break-glass) EDGE2_ROOT_PASSWORD=rAWdarLXCsTVnEQCmGxX # intermountainmesh.com WordPress (edge2 CT 101, 10.10.10.11) # Deployed: 2026-06-16 WP_IMESH_DB_ROOT_PW=BenH5nw7Y25k2xtrXfXcapt4xLzsQC2W WP_IMESH_DB_USER=wp_user WP_IMESH_DB_PASSWORD=9cnwfhQzkdyfU8C3yodIXu_IA1PUOawr WP_IMESH_DB_NAME=wordpress # WordPress admin credentials: set during browser setup wizard at https://intermountainmesh.com # Proxmox Datacenter Manager (PDM) — Break-glass local admin (edge2 CT 100, 100.64.0.28:8443) # PAM realm: Linux user on CT100, independent of Authentik SSO # Backup taken: /root/access.bak-2026-06-20 (inside CT100) PDM_URL="https://pdm.echo6.co" PDM_BREAKGLASS_USER="admin@pam" PDM_BREAKGLASS_PASS="7redditGold"