From 3eead39ce868d14732df2c0a7d51b4556676677a Mon Sep 17 00:00:00 2001
From: Tiago Yamamoto <japa@rede5.com.br>
Date: Tue, 17 Feb 2026 16:14:51 -0600
Subject: [PATCH] Remove credenciais da documentacao

- Credenciais Civo S3 movidas para ~/.ssh/
- Documentacao sem exposicao de senhas/tokens
- Vault SSH seguro em s3://rede5/vault/ssh/
---
 CONNECTIONS.md     | 32 +++++++++++++-------------------
 vps/echo/README.md | 14 +++-----------
 2 files changed, 16 insertions(+), 30 deletions(-)

diff --git a/CONNECTIONS.md b/CONNECTIONS.md
index e1deb0a..f35eb2d 100644
--- a/CONNECTIONS.md
+++ b/CONNECTIONS.md
@@ -10,34 +10,28 @@ Copia de backup segura no Civo Object Storage: `s3://rede5/vault/ssh/`
 
 ```
 .ssh/
-├── lh-zeus / lh-zeus.pub        # Redbull (antigo NC1)
-├── civo / civo.pub              # Echo VPS + Civo Object Storage
+├── lh-zeus / lh-zeus.pub        # Redbull
+├── civo / civo.pub              # Echo VPS
 ├── github / github.pub          # GitHub
 ├── ic-ad / ic-ad.pub            # Azure DevOps
-├── forgejo-gohorsejobs / .pub   # Forgejo (Gitea)
+├── forgejo-gohorsejobs / .pub   # Forgejo
 ├── bionexo / bionexo.pub        # Bionexo
-├── cloudflare-token             # Cloudflare API Token
-├── coolify-redbull-token        # Coolify API Token
+├── cloudflare-token             # Cloudflare API
+├── coolify-redbull-token        # Coolify API
 ├── github-token                 # GitHub PAT
-├── absam-db-novo                # Absam Database Credentials
-├── absam-token                  # Absam Cloud API Tokens
-├── civo-object-storage          # Civo S3 Object Storage
-├── cpanel-valueserver           # cPanel Valueserver
-└── app01-rabbitmq-beecare-origin # Beecare RabbitMQ
+├── absam-db-novo                # Absam DB
+├── absam-token                  # Absam API
+├── civo-object-storage          # Civo S3
+├── cpanel-valueserver           # cPanel
+└── app01-rabbitmq-beecare-origin # Beecare
 ```
 
 ### Restaurar Credenciais do Vault
 
 ```bash
-# No servidor Echo
-s3cmd -c /tmp/s3-photum.cfg get -r s3://rede5/vault/ssh/ /root/.ssh/
-
-# Ou via scp do Civo Object Storage
-# Credenciais: access_key=0UZ69TH03Q292DMTB82B
-#              secret_key=JJ5XXZYvoWdnqBCNP5oREjACyrXeH6EgSqeSybT7
-# Endpoint: https://objectstore.nyc1.civo.com
-# Bucket: rede5
-# Pasta: vault/ssh/
+# No servidor Echo, baixar do Civo Object Storage
+s3cmd get -r s3://rede5/vault/ssh/ ~/.ssh/
+chmod 600 ~/.ssh/*
 ```
 
 ---
diff --git a/vps/echo/README.md b/vps/echo/README.md
index 2324332..e0303bc 100644
--- a/vps/echo/README.md
+++ b/vps/echo/README.md
@@ -87,19 +87,11 @@ dokku ps:restart photum
 - **Dominio**: photum.rede5.com.br
 - **Porta**: 5000
 - **Banco**: photum-db (PostgreSQL 18.1)
-- **Storage**: Civo Object Storage (S3 compativel)
+- **Storage**: Civo Object Storage (ver ~/.ssh/civo-object-storage)
 - **Stack**: Go
 
-#### Civo Object Storage
-| Propriedade | Valor |
-|-------------|-------|
-| access_key | `0UZ69TH03Q292DMTB82B` |
-| secret_key | `JJ5XXZYvoWdnqBCNP5oREjACyrXeH6EgSqeSybT7` |
-| region | nyc1 |
-| endpoint | https://objectstore.nyc1.civo.com |
-| bucket | rede5 |
-
-**Pastas do bucket:**
+**Pastas do bucket rede5:**
+- `vault/ssh/` - Backup credenciais SSH
 - `ghorsejobs-dev/` - Resumes GoHorseJobs
 - `photum-dev/` - Imagens Photum
 - `obramarket-dev/` - Uploads ObraMarket