a55951f315
- Replace Python-based sanitizer in deploy script with lightweight jq/alpine - Add sync-agents-sanitized.mjs for on-demand and watch-mode sync - Add AgentConfigPath to appsettings.json (explicit default) - Extend /health/live endpoint to report agent count from sanitized config - Document architecture in docs/agent-identity-architecture.md - No openclaw.json secrets ever reach Nexus API containers Verification: - curl /api/v1/agents → 9 agents, zero secrets in response - agents-sanitized.json contains only 'agents' key, no gateway/auth - All C# code paths read from agents-sanitized.json (AgentConfigPath) - Bridge controller resolves agent IDs via AgentService.GetAllowedAgentIdsAsync()
32 lines
692 B
JSON
32 lines
692 B
JSON
{
|
|
"ConnectionStrings": {
|
|
"Nexus": "Host=localhost;Port=5432;Database=nexus;Username=nexus;Password=nexus"
|
|
},
|
|
"Integrations": {
|
|
"OpenClaw": {
|
|
"BaseUrl": "http://127.0.0.1:18789",
|
|
"RequiredVersion": "",
|
|
"Token": "",
|
|
"Password": ""
|
|
},
|
|
"Ollama": {
|
|
"BaseUrl": "http://127.0.0.1:11434"
|
|
},
|
|
"Nvidia": {
|
|
"ApiKey": ""
|
|
}
|
|
},
|
|
"Jwt": {
|
|
"Issuer": "nexus",
|
|
"Audience": "nexus-web",
|
|
"AccessTokenExpirationMinutes": 15,
|
|
"RefreshTokenExpirationDays": 7
|
|
},
|
|
"AgentConfigPath": "/home/node/.openclaw/agents-sanitized.json",
|
|
"TaskRecovery": {
|
|
"StaleHours": 2,
|
|
"IntervalMinutes": 30
|
|
},
|
|
"AllowedHosts": "*"
|
|
}
|