From 5edebd977d4948426cbce6dbfa844daa34827cd6 Mon Sep 17 00:00:00 2001 From: Bot Date: Fri, 11 Sep 2026 22:38:39 -0700 Subject: [PATCH] =?UTF-8?q?fix(traefik):=20remove=20tracked=20traefik.env?= =?UTF-8?q?=20=E2=80=94=20never=20commit=20secret-bearing=20env=20files?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The committed version contained a literal "***REDACTED***" placeholder as KEEPALIVED_PASSWORD, which was restored onto disk every time the real file was deleted or the local checkout re-synced from git. This caused VRRP auth to mismatch between keepalived-master and keepalived-backup (master picked up the broken committed value, backup retained a stale-but-correct value), producing a continuous "(VI_1) received an invalid passwd!" flood and VIP instability. traefik.env is now rendered fresh from traefik.env.template by deploy/provision-stack.py on every provisioning run and never committed. --- traefik/traefik.env | 2 -- 1 file changed, 2 deletions(-) delete mode 100644 traefik/traefik.env diff --git a/traefik/traefik.env b/traefik/traefik.env deleted file mode 100644 index fa6c8fc..0000000 --- a/traefik/traefik.env +++ /dev/null @@ -1,2 +0,0 @@ -KEEPALIVED_PASSWORD=***REDACTED*** -KEEPALIVED_VIRTUAL_IPS="#PYTHON2BASH:['192.168.4.30']"