blob: 4329ec7168e1edeb6ef328f792e4b89490a67d79 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
#+TITLE: WireGuard configs — not tracked
#+AUTHOR: Craig Jennings
This directory backs the installer's =import-wireguard-configs.sh=.
*This repo is public* (cgit at git.cjennings.net serves it over unauthenticated
https). Plaintext =*.conf= files carry live Proton =PrivateKey= material and are
gitignored here — never commit them.
Configs are supplied out-of-band: drop the plaintext =*.conf= into this
directory locally at install time (they stay gitignored), or fetch them from a
private store. Nothing here is tracked except this note and the .gitignore.
History: ten plaintext configs were committed and publicly exposed from
2026-07-05 to 2026-07-20. The keys were expired at Proton and every config was
purged from git history (filter-repo + server gc). See the closed WireGuard
security task in todo.org.
|
