From 17125387227b596d44b7a538e98975c76f49cb07 Mon Sep 17 00:00:00 2001 From: vitya Date: Mon, 24 Aug 2026 15:41:30 +0300 Subject: [PATCH] fix(mappa): add MAPPA_API_TOKEN to prod stack env (#1033) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Shared-token auth was off on prod (no MAPPA_API_TOKEN) — anyone with network access could call /admin/purge_secrets and all mutations. Token generated, stored in pass mappa/full-env, wired into stack env + agent MCP configs (~/.claude.json). Redeployed via Portainer (stack 27). Verify: /inbox without token → 401, with token → 200. --- host-stacks/vds-kzntsv/mappa.compose.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/host-stacks/vds-kzntsv/mappa.compose.yml b/host-stacks/vds-kzntsv/mappa.compose.yml index 3e00805..c2bb12e 100644 --- a/host-stacks/vds-kzntsv/mappa.compose.yml +++ b/host-stacks/vds-kzntsv/mappa.compose.yml @@ -15,6 +15,7 @@ services: environment: DATABASE_URL: postgres://mappa:${MAPPA_DB_PASS}@postgres:5432/mappa MAPPA_GITEA_TOKEN: ${MAPPA_GITEA_TOKEN} + MAPPA_API_TOKEN: ${MAPPA_API_TOKEN} healthcheck: test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1:8731/health"] interval: 15s