security: eliminar token de Telegram en claro de ficheros versionados
- openclaw/golden/openclaw.json: botToken → placeholder (referencia Infisical) - n8n/health-check-code-node.js: literal → process.env.TELEGRAM_BOT_TOKEN Token del bot @chemavx_bot rotado 2026-07-09 (BotFather). El valor vivo se gestiona en Infisical homelab/prod/telegram. NOTA: el token viejo sigue en el HISTORIAL de git; la revocación en BotFather es lo que lo neutraliza. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Fable 5
parent
395102a85e
commit
43c78246a8
@@ -8,7 +8,7 @@ return await (async () => {
|
||||
|
||||
// ── Configuración ────────────────────────────────────────────────────────
|
||||
|
||||
const TELEGRAM_TOKEN = '8611913802:AAFlrFtc0vYISOliO_W8B4c-W1ue0hG9Fio';
|
||||
const TELEGRAM_TOKEN = process.env.TELEGRAM_BOT_TOKEN /* rotado: leer de env, no hardcodear */;
|
||||
const TELEGRAM_CHAT = '5138407666';
|
||||
const RESTART_WEBHOOK = 'https://n8n.chemavx.xyz/webhook/uptime-kuma-restart';
|
||||
|
||||
|
||||
Reference in New Issue
Block a user