devops f4bee442db feat: sanitized agent config — Nexus no longer reads secrets from openclaw.json ...

- Mount agents-sanitized.json (agents key only, no secrets) instead of full openclaw.json
- Update AgentService default path from /home/node/.openclaw/openclaw.json to /etc/nexus/agents-sanitized.json
- Add AgentConfigPath env var to compose for explicit path configuration
- Generate sanitized file in deploy-nexus.sh before each deploy using Python extraction
- Add agents-sanitized.json to .gitignore

Eliminates the fragile ACL on openclaw.json (uid 1654) that causes 500 errors
on the Board endpoint when lost.

2026-07-12 13:08:43 +02:00

..

deploy-nexus.sh

feat: sanitized agent config — Nexus no longer reads secrets from openclaw.json

2026-07-12 13:08:43 +02:00