This is an old revision of the document!
# Credentials & API Tokens
## Cloudflare
- Token location: `/root/.secrets/cloudflare` on Hetzner (chmod 600) - Scope: DNS edit, all zones - Usage: `CF_TOKEN=$(cat /root/.secrets/cloudflare | head -1)` - ⚠️ Token is at /root/.secrets/cloudflare - do NOT keep other copies— do NOT roll it without updating both places
## Notes - Always read token from Hetzner rather than asking user to paste it - If token fails, check `/root/.secrets/cloudflare` exists before asking user to create a new one
## FastPixel - API Key: `3Mey63YBoROt6RFBSemX` - CF Token (FastPixel-specific): `W5dt2i0itwiKrwwsCvRRmezlczF-ooUcIsZ4I9fq` (separate from main CF token) - Location: `/root/.secrets/fastpixel-api-key` on Hetzner - Usage: Used by FastPixel plugin for CDN image optimization and caching
## Divi Booster (plugin license) - License key: `c394ac59fe5d0f5a5e08312672a4cf29` - Owner: Stephen Kent (payment #76906), lifetime, unlimited activations - Applied estate-wide 2026-08-15 to all kaburusvr sites running the divi-booster plugin (via wp-cli `wtfdivi` options). rainbowvapes.co.uk DB is on guru.co.uk shared hosting (not kaburusvr) — apply there separately. - Storage: Divi Booster stores the key in the WP option `wtfdivi` (serialized); check per-site with `wp option get wtfdivi –format=json`.
## kabururd (RustDesk relay)
- Host: 46.224.187.74 (public), 100.122.46.3 (Tailscale) - OS: Ubuntu 26.04 (Hetzner CX23) - SSH key: `~/.ssh/cx23_rustdesk` on kaburuaibox - SSH command: `ssh -i ~/.ssh/cx23_rustdesk [email protected]` - Services: RustDesk hbbs + hbbr (Docker containers, /opt/rustdesk/) - No MCP tool — SSH only