Files
nexus/.gitignore
T
devops f4bee442db
CI - Build & Test / Backend (.NET) (push) Successful in 35s
CI - Build & Test / Frontend (Vue/TS) (push) Successful in 18s
CI - Build & Test / Security Check (push) Successful in 2s
CI - Build & Test / Deploy Nexus (push) Has been skipped
feat: sanitized agent config — Nexus no longer reads secrets from openclaw.json
- Mount agents-sanitized.json (agents key only, no secrets) instead of full openclaw.json
- Update AgentService default path from /home/node/.openclaw/openclaw.json to /etc/nexus/agents-sanitized.json
- Add AgentConfigPath env var to compose for explicit path configuration
- Generate sanitized file in deploy-nexus.sh before each deploy using Python extraction
- Add agents-sanitized.json to .gitignore

Eliminates the fragile ACL on openclaw.json (uid 1654) that causes 500 errors
on the Board endpoint when lost.
2026-07-12 13:08:43 +02:00

45 lines
571 B
Plaintext

# Build outputs
**/bin/
**/obj/
**/dist/
**/node_modules/
# Environment
.env
!.env.template
# IDE
.idea/
.vs/
.vscode/
*.swp
*.swo
# OS
.DS_Store
Thumbs.db
# Docker
docker-compose.override.yml
# Logs
*.log
# Temporary
*.tmp
*.bak
# Crash artefacts / Core dumps
**/core
**/core.*
# pnpm / corepack local caches (lockfile IS committed for reproducible CI builds)
frontend/.pnpm-home/
frontend/.corepack-home/
# Claude local config (per-developer, not repo-shared)
.claude/
# Sanitized agent config (generated on host, not committed)
backend/agents-sanitized.json