Sam's To-Do — Baby Steps (2026-06-02)

The handful of things only Sam can do (his accounts/devices). No rush — do whenever. Each is ~5 min.

🔴 SECURITY (the only live risks — do these first when you can)

1. Rotate OpenAI key (5 min)

1. Go to platform.openai.com → log in.
2. Top-right → Settings (or your profile) → API keys.
3. Find the key, click ... → Revoke / Delete.
4. Click + Create new secret key → copy it.
5. Send the new key to Claude (in chat) → Claude puts it in the Worker secret. Then delete the file hookstreet-ops-api.txt from your computer.

2. Rotate Stitch key (5 min)

1. Go to your Stitch console (stitch.withgoogle.com) → API keys.
2. Revoke the old, create new.
3. Delete the file stitch-api-key.txt from your computer.

3. Change the camera (NVR) password — MOST IMPORTANT (5 min)

1. In a browser: http://d6468120.eero.online:8500 → log in (admin + current password).
2. Find Configuration → User / Account (or System → User).
3. Change the admin password to a long random one (16+ chars). Save it in Keeper.
4. Why: the cameras are reachable from the internet; a strong password is what keeps strangers out of the kids' rooms + off your home network.

🟢 SMART HOME (high value, do anytime)

4. Auto-Shabbos fridge (SmartThings) (5 min)

1. SmartThings app → Routines tab → +.
2. Name: "Shabbos — fridge." IF = Friday at a fixed time (pick one always before winter candle-lighting, ~4:00 PM). THEN = your refrigerator → Sabbath mode → On.
3. Save.

🟡 DDNS cleanup (do after a day of the eero address working)

5. Stop renewing No-IP

• Log into No-IP → let ztreitel.ddns.net expire (stop renewing). Kills the monthly captcha nag. (eero d6468120.eero.online replaced it.)

⚪ When you're ready (tell Claude — these are Claude's jobs, you just say go)

• Rotate OPS_READ_TOKEN out of the HTML (Claude does the code).
• Cloudflare Tunnel for cameras → then CLOSE the public camera ports entirely (the real fix).
• Schwab/Finnhub keys → move out of the MIS sheet into secure storage.