# Credentials & API Tokens

## Cloudflare

- **Token location:** `/root/.secrets/cloudflare` on Hetzner (chmod 600)
- **Scope:** DNS edit, all zones
- **Usage:** `CF_TOKEN=$(cat /root/.secrets/cloudflare | head -1)`
- ⚠️ Token is at /root/.secrets/cloudflare - do NOT keep other copies— do NOT roll it without updating both places

## Notes
- Always read token from Hetzner rather than asking user to paste it
- If token fails, check `/root/.secrets/cloudflare` exists before asking user to create a new one

## FastPixel
- **API Key:** `3Mey63YBoROt6RFBSemX`
- **CF Token (FastPixel-specific):** `W5dt2i0itwiKrwwsCvRRmezlczF-ooUcIsZ4I9fq` (separate from main CF token)
- **Location:** `/root/.secrets/fastpixel-api-key` on Hetzner
- **Usage:** Used by FastPixel plugin for CDN image optimization and caching

## Divi Booster (plugin license)
- **License key:** `c394ac59fe5d0f5a5e08312672a4cf29`
- **Owner:** Stephen Kent (payment #76906), lifetime, unlimited activations
- **Applied estate-wide 2026-08-15** to all kaburusvr sites running the divi-booster plugin (via wp-cli `wtfdivi` options). rainbowvapes.co.uk DB is on guru.co.uk shared hosting (not kaburusvr) — apply there separately.
- **Storage:** Divi Booster stores the key in the WP option `wtfdivi` (serialized); check per-site with `wp option get wtfdivi --format=json`.

## kabururd (RustDesk relay)

- **Host:** 46.224.187.74 (public), 100.122.46.3 (Tailscale)
- **OS:** Ubuntu 26.04 (Hetzner CX23)
- **SSH key:** `~/.ssh/cx23_rustdesk` on kaburuaibox
- **SSH command:** `ssh -i ~/.ssh/cx23_rustdesk root@100.122.46.3`
- **Services:** RustDesk hbbs + hbbr (Docker containers, /opt/rustdesk/)
- **No MCP tool** — SSH only

## wiki.kaburu.co (DokuWiki, public read)

- **URL:** https://wiki.kaburu.co
- **Superuser:** gwen (Gwen McQwen, gwen@kaburu.cc)
- **Admin password:** `/root/.secrets/wiki-admin-pw` on kaburusvr (chmod 600) — not on disk in this wiki; reference only
- **ACL:** Public Wiki (read all, write registered users only)
- **Backing store:** /home/wiki.kaburu.co/public_html/data/pages/ — flat .txt files per page, rsync-able, git-trackable
- **Source-of-truth:** /home/kaburu/wiki/wiki/*.md on kaburuaibox (synced daily 05:00 to TrueNAS); imported into DokuWiki via /tmp/md_to_dokuwiki.py
- **No MCP tools** — SSH only for ops