# vr1-office1 creds manifest -- what MUST be consolidated in ~/vr1-office1-creds/ (SEC-009).
# scripts/creds-audit.sh verifies this list against the live folder: presence, mode,
# non-empty. No secret VALUES are read -- only existence, mode, and declared provenance.
#
# fields:  <filename>  <octal-mode>  <source>
#   source = "local"        -- generated/held on the jumphost (vcloud)
#          = "<vm>:<path>"   -- MINTED ON A SITE VM; a working copy MUST be pulled into
#                              the folder at mint time (this is the class SEC-009 missed:
#                              office1-netbox:/root/netbox-secrets/api.token went
#                              un-consolidated until it was needed).
#
office1_svc_ed25519         600  local
office1_svc_ed25519.pub     644  local
opnsense-api.txt            600  local
opnsense-root-hash          600  local
opnsense-root-password      600  local
README                      600  local
tailscale-authkey.txt       600  local
vr1-netbox.env              600  local
vr1-netbox-sandbox.env      600  office1-netbox:/root/netbox-secrets/api.token
vr1-office1.env             600  local
vr1-stage1.env              600  local