From fd2b4cd6b52cd6601e548dbc2bf74b09ad876607 Mon Sep 17 00:00:00 2001
From: aitbc <aitbc@keisanki.net>
Date: Wed, 27 May 2026 14:34:28 +0200
Subject: [PATCH] Move JWT secret from inline environment variable to external
 secrets file for edge-api service

---
 apps/aitbc-edge/edge-api.service | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/aitbc-edge/edge-api.service b/apps/aitbc-edge/edge-api.service
index cdc9532d..dcbfa7e6 100644
--- a/apps/aitbc-edge/edge-api.service
+++ b/apps/aitbc-edge/edge-api.service
@@ -13,8 +13,8 @@ Environment="BLOCKCHAIN_RPC_HOST=localhost"
 Environment="BLOCKCHAIN_RPC_PORT=8006"
 Environment="GPU_SERVICE_HOST=localhost"
 Environment="GPU_SERVICE_PORT=8101"
-Environment="JWT_SECRET_KEY=CQNLjrtnUVGzdO1skuLsxoiPEEmav2Vj3aA302cvo8I"
 Environment="API_PORT=8103"
+EnvironmentFile=/etc/aitbc/secrets/jwt_secret
 ExecStart=/opt/aitbc/venv/bin/python -m aitbc_edge.main
 Restart=always
 RestartSec=10