security: remove all hardcoded API keys, require from environment

2026-02-11 21:33:18 +01:00
parent b36e5a33ea
commit 15675390ac
46 changed files with 107 additions and 107 deletions
--- a/docs/operator/deployment/nginx-domain-setup.md
+++ b/docs/operator/deployment/nginx-domain-setup.md
@@ -117,7 +117,7 @@ incus exec aitbc -- systemctl reload nginx
 ```bash
 # Check each service
 curl -k https://aitbc.bubuit.net/api/health
-curl -k https://aitbc.bubuit.net/admin/stats -H "X-Api-Key: REDACTED_ADMIN_KEY"
+curl -k https://aitbc.bubuit.net/admin/stats -H "X-Api-Key: ${ADMIN_API_KEY}"
 curl -k https://aitbc.bubuit.net/rpc/head
 ```