From 360f49d8b474098626579f55cd3c8a320a8af94d Mon Sep 17 00:00:00 2001 From: Chaim Date: Sun, 7 Jun 2026 21:04:44 +0000 Subject: [PATCH] docs: record Infisical SoT for host-service shared secrets COURT_FETCH_SHARED_SECRET + LEGAL_CHAT_SHARED_SECRET migrated to Infisical nautilus:/legal-ai (2026-06-07). Updated the pm2 config comments: the stale "migrate to Infisical once the MCP server is back" TODO is now done; local env files remain the runtime source, Infisical is the SoT/record. Co-Authored-By: Claude Opus 4.8 (1M context) --- scripts/legal-chat-service.config.cjs | 3 ++- scripts/legal-court-fetch-service.config.cjs | 2 ++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/scripts/legal-chat-service.config.cjs b/scripts/legal-chat-service.config.cjs index 37f90a5..5e5d3e7 100644 --- a/scripts/legal-chat-service.config.cjs +++ b/scripts/legal-chat-service.config.cjs @@ -37,7 +37,8 @@ const fs = require("fs"); // Load LEGAL_CHAT_SHARED_SECRET from a chmod 600 file off the repo. // The same value is mirrored in Coolify as the LEGAL_CHAT_SHARED_SECRET // env var so the FastAPI proxy sends a matching Authorization header. -// Migrate to Infisical (/_GUIDELINES) once the MCP server is back. +// SoT in Infisical: nautilus:/legal-ai/LEGAL_CHAT_SHARED_SECRET (migrated +// 2026-06-07). This local file remains the runtime source; rotate in both. const ENV_FILE = "/home/chaim/.legal-chat-service.env"; const env = { HOME: "/home/chaim", diff --git a/scripts/legal-court-fetch-service.config.cjs b/scripts/legal-court-fetch-service.config.cjs index c76d7aa..55f5d6b 100644 --- a/scripts/legal-court-fetch-service.config.cjs +++ b/scripts/legal-court-fetch-service.config.cjs @@ -29,6 +29,8 @@ */ const fs = require("fs"); +// SoT in Infisical: nautilus:/legal-ai/COURT_FETCH_SHARED_SECRET (migrated +// 2026-06-07). This local file is the runtime source; rotate in both. const ENV_FILE = "/home/chaim/.legal-court-fetch-service.env"; const env = { HOME: "/home/chaim",