security: eliminar token de Telegram en claro de ficheros versionados

- openclaw/golden/openclaw.json: botToken → placeholder (referencia Infisical)
- n8n/health-check-code-node.js: literal → process.env.TELEGRAM_BOT_TOKEN

Token del bot @chemavx_bot rotado 2026-07-09 (BotFather). El valor vivo se
gestiona en Infisical homelab/prod/telegram. NOTA: el token viejo sigue en el
HISTORIAL de git; la revocación en BotFather es lo que lo neutraliza.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
chemavx
2026-07-09 20:46:04 +00:00
co-authored by Claude Fable 5
parent 395102a85e
commit 43c78246a8
2 changed files with 2 additions and 2 deletions
+1 -1
View File
@@ -158,7 +158,7 @@
"telegram": {
"enabled": true,
"dmPolicy": "pairing",
"botToken": "8611913802:AAFlrFtc0vYISOliO_W8B4c-W1ue0hG9Fio",
"botToken": "<set-via-infisical: homelab/prod/telegram TELEGRAM_BOT_TOKEN>",
"groupPolicy": "allowlist",
"streaming": {
"mode": "partial"