Files
admin/host-stacks/vds-kzntsv
vitya 1712538722 fix(mappa): add MAPPA_API_TOKEN to prod stack env (#1033)
Shared-token auth was off on prod (no MAPPA_API_TOKEN) — anyone with network
access could call /admin/purge_secrets and all mutations. Token generated,
stored in pass mappa/full-env, wired into stack env + agent MCP configs
(~/.claude.json). Redeployed via Portainer (stack 27). Verify: /inbox without
token → 401, with token → 200.
2026-08-24 15:41:30 +03:00
..