"vault backup: 2026-03-08 13:51:33 from Flow"

21-Server Reference/README.md

@@ -31,26 +31,14 @@ The sidecar shares the main container's network namespace, so Tailscale sees the
 
 ## Credentials & Tokens
 
-> These are stored here for admin reference. Do not share.
+All credentials are stored in an encrypted file: `credentials.gpg` (AES256, GPG symmetric).
 
-### Mealie
-| Key | Value |
-|---|---|
-| Auth Token | `eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJsb25nX3Rva2VuIjp0cnVlLCJpZCI6IjNkZjZkZmM0LTkyZDgtNDIyNy1iMjBjLTA4ZjA2Njc2MGcă0IsIm5hbWUiOiJMTE0gIiwiaW50ZWdyYXRpb25faWQiOiJnZW5lcmljIiwiZXhwIjoxOTE5OTEwNDUwfQ.Ts5XbrF6Nr-0gvhKkt_01OPeAEoWQe_ndn0hGTtPOQc` |
+To decrypt:
+```bash
+gpg -d "credentials.gpg"
+```
 
-### Discord Bots
-| Bot | Token |
-|---|---|
-| Isomer | `NjY0MjMyOTYxMjM4ODkyNTc0.XhUFJg.ivnkBPtnEPGGcAwaXP50rOIPZsI` |
-| Star-15 | `ODQ2MTUxMDMxMjA1MDAzMjc0.GYFbRW.JeFITOZbBH_lqCuF-bS7edC0P30H6uqFKwz7is` |
-
-### AI
-| Service | Key |
-|---|---|
-| Gemini API | `AIzaSyD0uj33T_SH4Fvw2sWWW9akXF6ej9sqhlI` |
-
-### Server Passwords
-Shared password used across most Docker services (DB passwords, NextAuth secrets, etc.): see compose files at `/home/artanis/DockerFiles/` on the homelab.
+Requires GPG — available on Linux/macOS natively, or [GPG4Win](https://gpg4win.org) on Windows. Works fully offline.
 
 ---
 
@@ -59,7 +47,8 @@ Shared password used across most Docker services (DB passwords, NextAuth secrets
 ```
 21-Server Reference/
 ├── README.md               ← You are here
-├── Server Info.md          ← Legacy notes (superseded by this file)
+├── AI-UPDATE-INSTRUCTIONS.md ← How to pull live data and update these docs
+├── credentials.gpg         ← Encrypted credentials (GPG AES256)
 ├── homelab/
 │   ├── README.md           — Homelab overview & stack index
 │   ├── hardware.md         — CPU, RAM, storage