Monorepo for Aesthetic.Computer aesthetic.computer
at main 85 lines 2.5 kB view raw view rendered
1# Feed System Secrets 2 3This directory contains sensitive configuration for the Aesthetic Computer Feed system. 4 5## Files 6 7- `.env` - Environment variables for feed scripts and deployment 8- `wrangler.production.toml` - Cloudflare Workers configuration for aesthetic-feed deployment 9- `ed25519-private-key.txt` - ED25519 private key for DP-1 playlist signing (if needed) 10 11## Usage 12 13### Deploying DP1 Feed Worker 14 15Run the devault script to copy secrets to the working directory: 16 17```fish 18cd /workspaces/aesthetic-computer/aesthetic-computer-vault 19./devault.fish 20``` 21 22Then deploy: 23 24```fish 25cd /workspaces/aesthetic-computer/feed/dp1-feed 26npx wrangler deploy -c wrangler.production.toml 27``` 28 29### In DevContainer 30 31The devcontainer is configured to automatically copy these secrets. If you need to manually load: 32 33```fish 34# Load all environment variables 35export (cat /workspaces/aesthetic-computer/aesthetic-computer-vault/feed/.env | grep -v '^#') 36 37# Or for fish shell 38set -gx (cat /workspaces/aesthetic-computer/aesthetic-computer-vault/feed/.env | grep -v '^#' | string split '=') 39``` 40 41### In Build Scripts 42 43Scripts automatically load from environment or use defaults: 44 45```javascript 46const FEED_API_SECRET = process.env.FEED_API_SECRET || '...'; 47const MONGODB_CONNECTION_STRING = process.env.MONGODB_CONNECTION_STRING; 48``` 49 50## Active Resources 51 52### Channel 53- **ID**: `23b63744-649f-4274-add5-d1b439984e51` 54- **URL**: https://feed.aesthetic.computer/api/v1/channels/23b63744-649f-4274-add5-d1b439984e51 55- **Title**: KidLisp 56- **Curator**: prompt.ac 57 58### Current Playlists (as of October 6, 2025) 59- **f60493a2-9e69-4e6b-837e-76047f48438c** - Top 100 as of Monday, October 6, 2025 60- **2680b102-04ee-47b5-b7d7-f814094695e7** - Colors 61- **e1bf1aae-2427-4dd0-a39d-f5da89fdf02e** - Chords for `clock` 62 63## Security Notes 64 65- Never commit `.env` or key files to public repositories 66- API secrets provide full write access to the feed system 67- MongoDB credentials have read access to aesthetic database 68- Rotate keys periodically for security 69 70## Deployment Keys 71 72When deploying the Cloudflare Worker, these secrets must be set: 73 74```bash 75cd /workspaces/aesthetic-computer/feed/dp1-feed 76wrangler secret put API_SECRET # Use FEED_API_SECRET value 77wrangler secret put ED25519_PRIVATE_KEY # If using signed playlists 78``` 79 80## Backup 81 82These credentials are also stored in: 83- 1Password (if applicable) 84- Cloudflare Dashboard (for worker secrets) 85- MongoDB Atlas (for database access)