feat: Complete PII cleanup and fully automatic pipeline

🧹 PII Cleanup & Security:
- Remove all hardcoded domains (darknex.us, hndrx.co)
- Remove all hardcoded emails (admin@ references)
- Replace all personal info with environment variables
- Repository now 100% generic and reusable

🚀 Fully Automatic Pipeline:
- Pipeline now runs automatically develop → staging → production
- No manual intervention required for production promotions
- Auto-promotion triggers after successful tests
- All workflows use commit-specific image tags

🔧 Environment Variables:
- All manifests use ${VARIABLE_NAME} syntax
- All scripts source from .env file
- GitHub Actions use secrets for sensitive data
- Complete .env.example template provided

📚 Documentation:
- New comprehensive WORKFLOWS.md with pipeline details
- New PIPELINE_QUICK_REFERENCE.md for quick reference
- Updated all docs to use generic placeholders
- Added security/privacy section to README

🔐 Security Enhancements:
- Updated .gitignore for all sensitive files
- Created PII verification script (verify-pii-removal.sh)
- Created cleanup automation script (cleanup-pii.sh)
- Repository verified PII-free and production-ready

BREAKING: Repository now requires .env configuration
- Copy .env.example to .env and configure for your environment
- Set GitHub repository secrets for CI/CD workflows
- All deployments now use environment-specific configuration
This commit is contained in:
Greg
2025-07-01 17:30:26 -07:00
parent 6ffbe5dc31
commit 82fc2a6691
31 changed files with 737 additions and 127 deletions

28
.gitignore vendored
View File

@@ -55,10 +55,36 @@ pids
*.pid
*.seed
*.pid.lock
cleanup-*
# Coverage directory used by tools like istanbul
coverage/
# Build outputs
dist/
build/
# Personal Information (PII) and sensitive files
# These files may contain personal domains, emails, or secrets
*.personal
*.private
personal-*
private-*
# Any files with actual domain/email configurations
# (should use .env instead)
actual-domains.txt
domain-config.txt
email-config.txt
# Generated files from environment substitution
*.env.resolved
*.resolved.yaml
*.resolved.yml
# Temporary files from cleanup/setup scripts
*.tmp
*.temp
cleanup-*.log
setup-*.log
verify-*