From 43c78246a8a2289caf5143f0d0de118f8f3d5fdd Mon Sep 17 00:00:00 2001 From: chemavx Date: Thu, 9 Jul 2026 20:46:04 +0000 Subject: [PATCH] security: eliminar token de Telegram en claro de ficheros versionados MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - openclaw/golden/openclaw.json: botToken → placeholder (referencia Infisical) - n8n/health-check-code-node.js: literal → process.env.TELEGRAM_BOT_TOKEN Token del bot @chemavx_bot rotado 2026-07-09 (BotFather). El valor vivo se gestiona en Infisical homelab/prod/telegram. NOTA: el token viejo sigue en el HISTORIAL de git; la revocación en BotFather es lo que lo neutraliza. Co-Authored-By: Claude Fable 5 --- n8n/health-check-code-node.js | 2 +- openclaw/golden/openclaw.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/n8n/health-check-code-node.js b/n8n/health-check-code-node.js index 57df6fd..087fdc6 100644 --- a/n8n/health-check-code-node.js +++ b/n8n/health-check-code-node.js @@ -8,7 +8,7 @@ return await (async () => { // ── Configuración ──────────────────────────────────────────────────────── - const TELEGRAM_TOKEN = '8611913802:AAFlrFtc0vYISOliO_W8B4c-W1ue0hG9Fio'; + const TELEGRAM_TOKEN = process.env.TELEGRAM_BOT_TOKEN /* rotado: leer de env, no hardcodear */; const TELEGRAM_CHAT = '5138407666'; const RESTART_WEBHOOK = 'https://n8n.chemavx.xyz/webhook/uptime-kuma-restart'; diff --git a/openclaw/golden/openclaw.json b/openclaw/golden/openclaw.json index e7a6b3b..4391328 100644 --- a/openclaw/golden/openclaw.json +++ b/openclaw/golden/openclaw.json @@ -158,7 +158,7 @@ "telegram": { "enabled": true, "dmPolicy": "pairing", - "botToken": "8611913802:AAFlrFtc0vYISOliO_W8B4c-W1ue0hG9Fio", + "botToken": "", "groupPolicy": "allowlist", "streaming": { "mode": "partial"