Files
nexus/backend/appsettings.json
T
developer a55951f315
CI - Build & Test / Backend (.NET) (push) Successful in 31s
CI - Build & Test / Frontend (Vue/TS) (push) Successful in 17s
CI - Build & Test / Security Check (push) Successful in 3s
CI - Build & Test / Deploy Nexus (push) Failing after 19s
P4: Agent-Identitäten ohne Secrets — sanitized config feed
- Replace Python-based sanitizer in deploy script with lightweight jq/alpine
- Add sync-agents-sanitized.mjs for on-demand and watch-mode sync
- Add AgentConfigPath to appsettings.json (explicit default)
- Extend /health/live endpoint to report agent count from sanitized config
- Document architecture in docs/agent-identity-architecture.md
- No openclaw.json secrets ever reach Nexus API containers

Verification:
- curl /api/v1/agents → 9 agents, zero secrets in response
- agents-sanitized.json contains only 'agents' key, no gateway/auth
- All C# code paths read from agents-sanitized.json (AgentConfigPath)
- Bridge controller resolves agent IDs via AgentService.GetAllowedAgentIdsAsync()
2026-07-13 09:12:19 +02:00

32 lines
692 B
JSON

{
"ConnectionStrings": {
"Nexus": "Host=localhost;Port=5432;Database=nexus;Username=nexus;Password=nexus"
},
"Integrations": {
"OpenClaw": {
"BaseUrl": "http://127.0.0.1:18789",
"RequiredVersion": "",
"Token": "",
"Password": ""
},
"Ollama": {
"BaseUrl": "http://127.0.0.1:11434"
},
"Nvidia": {
"ApiKey": ""
}
},
"Jwt": {
"Issuer": "nexus",
"Audience": "nexus-web",
"AccessTokenExpirationMinutes": 15,
"RefreshTokenExpirationDays": 7
},
"AgentConfigPath": "/home/node/.openclaw/agents-sanitized.json",
"TaskRecovery": {
"StaleHours": 2,
"IntervalMinutes": 30
},
"AllowedHosts": "*"
}