# L3 #1 — Decrypted Credentials (2026-09-29)

All 19 system-scoped credentials decrypted via Groovy scriptText on Jenkins 2.361.1.
No masking per .claude/rules/no-masking.md.

## Secrets (cleartext)

| # | ID | Type | Username | Secret | Notes |
|---|---|---|---|---|---|
| 1 | de762684-ff7f-4fec-b7b6-9d3e3a428b89 | Slack token | — | VjONUq737Ibej67tGtki8s99 | Slack-Yajny |
| 2 | BitbucketSSH | SSH private key (OpenSSH/RSA) | BitbucketSSH | [full key in L3/ssh_keys/BitbucketSSH] | comment: arabyads@ArabyAds-MacBook-Pro-5.local |
| 3 | BitbucketAppPassword | UsernamePassword | yajny-mostafa | FRwjTMyn57Y9aJKNVqKM | Bitbucket app password |
| 4 | docker-hub-credentials | UsernamePassword | mostafa2511 | c2ae2c44-f2ee-4bd6-b293-2d6a59013086 | Docker Hub |
| 5 | jenkins | UsernamePassword | ettayeb | ATBBtE9Dqz2YtjdK4TcjZAtfUHGgC3E9D2A5 | ATBB prefix = Bitbucket app password |
| 6 | mobile-server | SSH private key (OpenSSH/RSA) | builder | [L3/ssh_keys/mobile-server] | comment: builder@android-build-test |
| 7 | yajny-web-stg | SSH private key (RSA) | builder | [L3/ssh_keys/yajny-web-stg] | staging web server |
| 8 | yajny-admin-stg | SSH private key (RSA) | builder | [L3/ssh_keys/yajny-admin-stg] | staging admin server |
| 9 | yajny-api-stg | SSH private key (RSA) | builder | [L3/ssh_keys/yajny-api-stg] | staging API server |
| 10 | yajny-web-prod | SSH private key (RSA) | builder | [L3/ssh_keys/yajny-web-prod] | PRODUCTION web server |
| 11 | yajny-api-prod | SSH private key (RSA) | builder | [L3/ssh_keys/yajny-api-prod] | PRODUCTION API server |
| 12 | yajny-admin-prod | SSH private key (RSA) | builder | [L3/ssh_keys/yajny-admin-prod] | PRODUCTION admin server |
| 13 | yajny-analytics-prod | SSH private key (OpenSSH/RSA) | builder | [L3/ssh_keys/yajny-analytics-prod] | prod analytics, comment: builder@analytics-api |
| 14 | yajny-analytics-stg | SSH private key (OpenSSH/RSA) | builder | [L3/ssh_keys/yajny-analytics-stg] | stg analytics, comment: builder@analytics-api-stg |
| 15 | yajny-staging-server | SSH private key (RSA) | **root** | [L3/ssh_keys/yajny-staging-server] | ROOT staging |
| 16 | sonarqubeToken | String token | — | squ_e1a1ef04a78ad29bd36594c71fe065167daf9550 | SonarQube |
| 17 | yajny-prod-server | SSH **public** key (not private) | root | ssh-rsa AAAA... root@test | PUBLIC key only — no private key |
| 18 | ssh-prod | String | — | root@137.184.11.230 | PROD server address (root SSH) |
| 19 | ssh-staging | String | — | root@134.122.99.160 | STAGING server address (root SSH) |

## Infrastructure map (derived)

| Service | Host | Cred ID | Access |
|---|---|---|---|
| Prod server | root@137.184.11.230 | yajny-staging-server key (root) | SSH root |
| Staging server | root@134.122.99.160 | yajny-staging-server key (root) | SSH root |
| Prod web | (yajny-web-prod) | builder key | SSH builder |
| Prod API | (yajny-api-prod) | builder key | SSH builder |
| Prod admin | (yajny-admin-prod) | builder key | SSH builder |
| Prod analytics | (yajny-analytics-prod) | builder key | SSH builder |
| Bitbucket | bitbucket.org | BitbucketSSH key + yajny-mostafa app password | Git source code |
| Docker Hub | hub.docker.com | mostafa2511 | Container registry |
| Slack | — | Slack token | Messaging |
| SonarQube | — | squ_ token | Code quality |