19 lines
791 B
Markdown
19 lines
791 B
Markdown
# Secrets (NOT in git)
|
|
|
|
Everything in this directory except `README.md` and `run.sh` is gitignored.
|
|
Secrets are **typed in interactively** by `run.sh` — nothing is committed, kept
|
|
on external media, or baked into the ISO.
|
|
|
|
## What counts as a secret here
|
|
- share credentials — `/etc/nase.meow.credentials` (CIFS) and `/etc/davfs2/secrets`
|
|
(davfs); the fstab entries that reference them are non-secret and live in
|
|
`02-system/60-shares.sh`
|
|
- localsend keys — strip `flutter.ls_security_context` from its prefs before archiving; it regenerates
|
|
- GNOME Online Accounts (`~/.config/goa-1.0/accounts.conf`)
|
|
- later: licensed/cracked app installers & licenses (see `03-user/90-licensed-apps.sh`)
|
|
|
|
## Usage
|
|
```
|
|
sudo ./run.sh # prompts for each credential, writes the /etc files
|
|
```
|