zizi 6814fa2a62 docs(ops): record proxy-ng deployment hardening
Add deployment traces for the JPpro proxy node, RackNerd origin hosts, catproxy boundary changes, local speed checks, and Sub2API rate-limit behavior.

Keep remote secrets excluded while tracking sanitized nginx, compose, plan, and operational memory documents.
2026-05-26 23:27:41 +08:00

9 lines
441 B
Markdown

# Secrets Directory
此目录用于本机保存 `个人-US-racknerd-0425-1c1g` 上 Sub2API 运行所需密钥备份。
- 远程 `.env` 路径:`/opt/sub2api/.env`
- 远程 Mihomo 配置路径:`/opt/sub2api/mihomo/config.yaml`
- 这些文件包含数据库密码、JWT 密钥、TOTP 密钥、订阅地址或代理凭据,默认被上级 `.gitignore` 排除。
- 不要提交真实密钥,不要把密钥写入 README、issue 或 PR。