Arcadia/arcadia-cloud
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(security): purge burned Guardian literal from dev/test config (Phase 4) #2

Merged
jules merged 1 commits from purge/guardian-dev-literal into main 2026-06-21 01:44:52 +00:00
Conversation 0 Commits 1 Files Changed 2 +2 -2
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 25c6cb705d - Show all commits

2
config/dev.exs
View File

@@ -25,7 +25,7 @@ config :arcadia_cloud, ArcadiaCloudWeb.Endpoint,
# Guardian — must match arcadia-core's Arcadia.Guardian dev secret_key # Guardian — must match arcadia-core's Arcadia.Guardian dev secret_key
# (shared verbatim with arcadia-social and arcadia-voice). # (shared verbatim with arcadia-social and arcadia-voice).
config :arcadia_cloud, ArcadiaCloud.Guardian, config :arcadia_cloud, ArcadiaCloud.Guardian,
secret_key: "DuMkIRN3Qcxk8VqOu8nHj5i7a7a7YgBHF4oXqKwDI4A=" secret_key: "dev-only-guardian-secret-not-for-production-aaaaaaaaaaaaaaaa="
# skyai-finance push — service-to-service identity for cloud invoice push. # skyai-finance push — service-to-service identity for cloud invoice push.
# tenant_id="platform-admin" lands invoices in the platform's own books; # tenant_id="platform-admin" lands invoices in the platform's own books;

2
config/runtime.exs
View File

@@ -32,7 +32,7 @@ config :arcadia_cloud, ArcadiaCloud.Guardian,
System.get_env("GUARDIAN_SECRET_KEY") || System.get_env("GUARDIAN_SECRET_KEY") ||
if(config_env() == :prod, if(config_env() == :prod,
do: raise("environment variable GUARDIAN_SECRET_KEY is missing"), do: raise("environment variable GUARDIAN_SECRET_KEY is missing"),
else: "DuMkIRN3Qcxk8VqOu8nHj5i7a7a7YgBHF4oXqKwDI4A=" else: "dev-only-guardian-secret-not-for-production-aaaaaaaaaaaaaaaa="
) )
if config_env() == :prod do if config_env() == :prod do