security: eliminar token de Telegram en claro de ficheros versionados
- openclaw/golden/openclaw.json: botToken → placeholder (referencia Infisical) - n8n/health-check-code-node.js: literal → process.env.TELEGRAM_BOT_TOKEN Token del bot @chemavx_bot rotado 2026-07-09 (BotFather). El valor vivo se gestiona en Infisical homelab/prod/telegram. NOTA: el token viejo sigue en el HISTORIAL de git; la revocación en BotFather es lo que lo neutraliza. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Fable 5
parent
395102a85e
commit
43c78246a8
@@ -158,7 +158,7 @@
|
||||
"telegram": {
|
||||
"enabled": true,
|
||||
"dmPolicy": "pairing",
|
||||
"botToken": "8611913802:AAFlrFtc0vYISOliO_W8B4c-W1ue0hG9Fio",
|
||||
"botToken": "<set-via-infisical: homelab/prod/telegram TELEGRAM_BOT_TOKEN>",
|
||||
"groupPolicy": "allowlist",
|
||||
"streaming": {
|
||||
"mode": "partial"
|
||||
|
||||
Reference in New Issue
Block a user