OpeItcLoc03/admin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(mappa): add MAPPA_API_TOKEN to prod stack env (#1033)

Browse Source 
Shared-token auth was off on prod (no MAPPA_API_TOKEN) — anyone with network
access could call /admin/purge_secrets and all mutations. Token generated,
stored in pass mappa/full-env, wired into stack env + agent MCP configs
(~/.claude.json). Redeployed via Portainer (stack 27). Verify: /inbox without
token → 401, with token → 200.
This commit is contained in:
vitya
2026-08-24 15:41:30 +03:00
parent b2f3e0f9a4
commit 1712538722
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
host-stacks/vds-kzntsv/mappa.compose.yml
View File

@@ -15,6 +15,7 @@ services:
environment: environment:
DATABASE_URL: postgres://mappa:${MAPPA_DB_PASS}@postgres:5432/mappa DATABASE_URL: postgres://mappa:${MAPPA_DB_PASS}@postgres:5432/mappa
MAPPA_GITEA_TOKEN: ${MAPPA_GITEA_TOKEN} MAPPA_GITEA_TOKEN: ${MAPPA_GITEA_TOKEN}
MAPPA_API_TOKEN: ${MAPPA_API_TOKEN}
healthcheck: healthcheck:
test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1:8731/health"] test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1:8731/health"]
interval: 15s interval: 15s