mirror of
https://github.com/zvx-echo6/meshai.git
synced 2026-08-26 17:31:34 +00:00
51ee056b21
Both were fully plumbed and read by nothing.
api_key -- self-documented as dead at config.py ("Keyless: api_key is
retained but unused"), yet wired end-to-end: a GUI ManagedSecret field, a
SECRET_FIELDS entry, an EXPECTED_SECRETS entry, a secrets_store mapping and
label, and a line in .env.example. env/wzdx.py assigned self._api_key and
never read it again. So an operator could go get an API key, paste it into
the secure secrets manager, and have it do precisely nothing -- the ritual
looked complete end to end, which is what made it worth removing rather
than leaving.
endpoints -- default ["/get/event"], exposed as an editable list in the
dashboard, never read. Copy-paste from Roads511Config.endpoints (which IS
read, at env/roads511.py; Roads511 is untouched here). WZDx discovers feeds
via the FHWA registry_url/states instead.
WZDx's actual fetch behavior is unchanged; this removes dead config only.
Note for existing installs: anyone with WZDX_API_KEY set in
/data/secrets/.env will simply have an ignored env var. Harmless -- it was
already ignored.
Suite: 2337 passed, 6 failed (the pre-existing set: stale SCHEMA_VERSION x3,
expired TLE fixtures x2, one order-dependent), 72 skipped -- exact baseline
match, no new failures.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
20 lines
431 B
Bash
20 lines
431 B
Bash
# MeshAI Secrets Template
|
|
# Copy to /data/secrets/.env and fill in your values
|
|
# This file is gitignored - never commit real secrets
|
|
|
|
# LLM API Keys (only one needed based on your backend choice)
|
|
OPENAI_API_KEY=
|
|
ANTHROPIC_API_KEY=
|
|
GOOGLE_API_KEY=
|
|
|
|
# Mesh Source Credentials
|
|
MESHMONITOR_API_TOKEN=
|
|
MQTT_PASSWORD=
|
|
|
|
# Environmental Feed Keys
|
|
TOMTOM_API_KEY=
|
|
FIRMS_MAP_KEY=
|
|
ROADS511_API_KEY=
|
|
|
|
# Notification Credentials
|
|
SMTP_PASSWORD=
|