docs: record Infisical SoT for host-service shared secrets

COURT_FETCH_SHARED_SECRET + LEGAL_CHAT_SHARED_SECRET migrated to Infisical
nautilus:/legal-ai (2026-06-07). Updated the pm2 config comments: the stale
"migrate to Infisical once the MCP server is back" TODO is now done; local
env files remain the runtime source, Infisical is the SoT/record.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-06-07 21:04:44 +00:00
parent 24d80e6a2a
commit 360f49d8b4
2 changed files with 4 additions and 1 deletions

View File

@@ -37,7 +37,8 @@ const fs = require("fs");
// Load LEGAL_CHAT_SHARED_SECRET from a chmod 600 file off the repo. // Load LEGAL_CHAT_SHARED_SECRET from a chmod 600 file off the repo.
// The same value is mirrored in Coolify as the LEGAL_CHAT_SHARED_SECRET // The same value is mirrored in Coolify as the LEGAL_CHAT_SHARED_SECRET
// env var so the FastAPI proxy sends a matching Authorization header. // env var so the FastAPI proxy sends a matching Authorization header.
// Migrate to Infisical (/_GUIDELINES) once the MCP server is back. // SoT in Infisical: nautilus:/legal-ai/LEGAL_CHAT_SHARED_SECRET (migrated
// 2026-06-07). This local file remains the runtime source; rotate in both.
const ENV_FILE = "/home/chaim/.legal-chat-service.env"; const ENV_FILE = "/home/chaim/.legal-chat-service.env";
const env = { const env = {
HOME: "/home/chaim", HOME: "/home/chaim",

View File

@@ -29,6 +29,8 @@
*/ */
const fs = require("fs"); const fs = require("fs");
// SoT in Infisical: nautilus:/legal-ai/COURT_FETCH_SHARED_SECRET (migrated
// 2026-06-07). This local file is the runtime source; rotate in both.
const ENV_FILE = "/home/chaim/.legal-court-fetch-service.env"; const ENV_FILE = "/home/chaim/.legal-court-fetch-service.env";
const env = { const env = {
HOME: "/home/chaim", HOME: "/home/chaim",