---
name: feedback-forgejo-redaction
description: "Always redact IPs, ports, and passwords in any files committed to the homelab Forgejo repo"
metadata: 
  node_type: memory
  type: feedback
  originSessionId: 20e70bfb-0880-4ec4-aece-a21855bb3dfe
---

Always redact IPs, ports, and passwords before committing or editing any file in the KiteStacks homelab Forgejo repo (kitestacks-homelab). This applies to all documents: RUNBOOK.md, docs/, projects/, DEBUG-DOCUMENTATION.md, README.md, etc.

**Why:** Security — user does not want real infrastructure details (IPs, port bindings, credentials) in the public Forgejo repository.

**How to apply:**
- IPs → descriptive placeholders like `<KSCLOUD1_PUBLIC_IP>`, `<MONK_LAN_IP>`, `<KSCLOUD1_TAILSCALE_IP>`, etc.
- Port numbers in host bindings, IP:port combos, explicit app URLs → `<port>` placeholder
- Passwords, sudo passwords, OAuth secrets → `<password>` or descriptive placeholder like `<KSCLOUD1_SUDO_PASSWORD>`
- Apply proactively when writing new content for these docs, not just on request