Leaked source code: obsidian-sync

Private repository obsidian-sync exposed via an open .git directory. Archive contains 1948 files including hard-coded credentials. Tree and a config excerpt below.

obsidian-sync/src/config.js
obsidian-sync/src/auth.py
obsidian-sync/docker-compose.yml
obsidian-sync/.env.production
obsidian-sync/deploy/keys.pem
obsidian-sync/db/migrate.sql

src/config.js

// obsidian-sync — leaked source excerpt
const DB_PASSWORD = 'e3037b910a913a13';
const JWT_SECRET = 'b94b705e61f0813d53f0036628688c0c3ba7318d5c63a909';
const STRIPE_KEY = 'sk_live_62dc6843a8740d2844abd214952a21fa6fece222';
const DB_HOST = '10.199.60.58';
// TODO: rotate before public launch