security: remove all hardcoded API keys, require from environment

2026-02-11 21:33:18 +01:00
parent b36e5a33ea
commit 15675390ac
46 changed files with 107 additions and 107 deletions
--- a/scripts/local-domain-proxy.py
+++ b/scripts/local-domain-proxy.py
@@ -124,7 +124,7 @@ def test_endpoints():
    for name, url in endpoints:
        try:
            if "admin" in url:
-                response = requests.get(url, headers={"X-Api-Key": "REDACTED_ADMIN_KEY"}, timeout=2)
+                response = requests.get(url, headers={"X-Api-Key": "${ADMIN_API_KEY}"}, timeout=2)
            else:
                response = requests.get(url, timeout=2)
            print(f"   {name}: ✅ {response.status_code}")