From f102d9ec190b4f79216ac5470365c08808b52d47 Mon Sep 17 00:00:00 2001
From: vitya <vitya.kuznetsov@gmail.com>
Date: Sat, 30 May 2026 08:35:12 +0300
Subject: [PATCH] =?UTF-8?q?@=20docs(CLAUDE):=20add=20secrets=20rule=20?=
 =?UTF-8?q?=E2=80=94=20pass-first,=20stostayer=20server=20map?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Credentials live in pass (password-store); check `pass ls`/`pass show` before
grepping the wiki or ~/.ssh/config. Lists the СТО Стайер pass entries
(stostayer/client, rusonyx, client-wireguard).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@
---
 CLAUDE.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/CLAUDE.md b/CLAUDE.md
index 3544df7..8988e52 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -13,6 +13,11 @@ delegate to interns when allowed
 recommend, don't menu
 we're on Windows
 
+# Secrets rule
+
+Все креды (SSH, БД, panel, BA) лежат в `pass` (password-store). **Перед поиском доступов — `pass ls` / `pass show <path>`, а не grep по вики или `~/.ssh/config`.**
+Серверы СТО Стайер: `stostayer/client` (`new.stostayer.ru:20435` — машина клиента, файлы 1С в `/var/from_1c/`), `stostayer/rusonyx`, `stostayer/client-wireguard`.
+
 # VDS ops rule
 
 Все docker-compose stacks на VDS управляются через Portainer (`https://portainer.vds.kzntsv.site`).