chore: remove dead Supabase keys and leaked API keys from env config

SECURITY: Remove live API keys that were committed to .env.development:
- Worldream OpenAI key (sk-proj-...)
- Worldream Gemini key
- Worldream Replicate token
- Worldream Supabase anon key (live JWT)

These keys should be rotated immediately.

Also removes dead Supabase config for:
- Maerchenzauber (archived)
- Memoro (archived)
- ManaDeck (migrated to PostgreSQL + Drizzle)
- ManaCore (will be migrated to mana-core-auth)

Cleans up generate-env.mjs to remove Memoro entries and
Supabase references from ManaDeck and Worldream.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Till JS 2026-03-23 11:25:24 +01:00
parent 07365c31b2
commit 40718a7554
2 changed files with 0 additions and 60 deletions

View file

@ -144,26 +144,6 @@ const APP_CONFIGS = [
},
},
// Memoro Mobile
{
path: 'apps/memoro/apps/mobile/.env',
vars: {
EXPO_PUBLIC_SUPABASE_URL: (env) => env.MEMORO_SUPABASE_URL,
EXPO_PUBLIC_SUPABASE_ANON_KEY: (env) => env.MEMORO_SUPABASE_ANON_KEY,
EXPO_PUBLIC_MIDDLEWARE_API_URL: (env) => env.MEMORO_MIDDLEWARE_API_URL,
EXPO_PUBLIC_APPID: (env) => env.MEMORO_APPID,
},
},
// Memoro Web
{
path: 'apps/memoro/apps/web/.env',
vars: {
PUBLIC_SUPABASE_URL: (env) => env.MEMORO_SUPABASE_URL,
PUBLIC_SUPABASE_ANON_KEY: (env) => env.MEMORO_SUPABASE_ANON_KEY,
},
},
// Manadeck Backend
{
path: 'apps/manadeck/apps/backend/.env',
@ -181,8 +161,6 @@ const APP_CONFIGS = [
{
path: 'apps/manadeck/apps/web/.env',
vars: {
PUBLIC_SUPABASE_URL: (env) => env.MANADECK_SUPABASE_URL,
PUBLIC_SUPABASE_ANON_KEY: (env) => env.MANADECK_SUPABASE_ANON_KEY,
PUBLIC_API_URL: (env) => `http://localhost:${env.MANADECK_BACKEND_PORT || '3004'}`,
PUBLIC_MANA_CORE_AUTH_URL: (env) => env.MANA_CORE_AUTH_URL,
PUBLIC_UMAMI_WEBSITE_ID: (env) => env.UMAMI_WEBSITE_ID_MANADECK || '',
@ -657,12 +635,7 @@ const APP_CONFIGS = [
{
path: 'games/worldream/apps/web/.env',
vars: {
PUBLIC_SUPABASE_URL: (env) => env.WORLDREAM_SUPABASE_URL,
PUBLIC_SUPABASE_ANON_KEY: (env) => env.WORLDREAM_SUPABASE_ANON_KEY,
PUBLIC_MANA_CORE_AUTH_URL: (env) => env.MANA_CORE_AUTH_URL,
OPENAI_API_KEY: (env) => env.WORLDREAM_OPENAI_API_KEY,
GEMINI_API_KEY: (env) => env.WORLDREAM_GEMINI_API_KEY,
REPLICATE_API_TOKEN: (env) => env.WORLDREAM_REPLICATE_API_TOKEN,
},
},