- remetrics POSTGRES_PASSWORD, SECRET_KEY_BASE, OPENAI_API_KEY moved from
inline compose to gitignored ~/services/remetrics/.env (mode 600) via
${VAR} interpolation; byte-identical resolved config, zero container disruption
- strapi-remetrics already used env_file: ./strapi/.env — no change needed there
- remaining remetrics prereq is the missing build: stanza (PREREQ 2)
- GCS service-account JSON (strapi/gcs/) noted as follow-up rotation item for Vaultwarden
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Jared Swanson
46725a5738