OpenCode
68a9071cf1
Local branch had diverged from origin/master (sibling commits on the same base). Rewrote local history linearly on top of origin/master, folding in all local content: exa/hot-platform discovery hunters, leaks ledger, nightly sweep orchestrator, updated .gitignore and skill docs, plus the latest hunt output and vault state. Remote-only files (vault keys, channel scripts) were restored rather than dropped, so the resulting tree is a full union of both sides.
1 line
4.3 KiB
JSON
1 line
4.3 KiB
JSON
{"repo": "aean0x/rk3588-nixos-nas", "files": {"secrets/secrets.yaml.example": {"d75efbc0b97030506b825bb8b57d62f09a9c5a28": {"t": 1786068524.1596017, "n": 3959, "h": "a8dfda780de9a898", "c": "# SOPS Secrets Template\n# 1. Copy to secrets.yaml.work\n# 2. Fill in your values\n# 3. Run ./encrypt\n\n# Generate with: mkpasswd -m SHA-512\nuser_hashedPassword: \"$6$...\"\n\n# Tailscale auth key (from https://login.tailscale.com/admin/settings/keys)\ntailscale_authKey: \"tskey-auth-...\"\n\n# WiFi PSK (only needed if enableWifi = true in settings.nix)\n# wifi_psk: \"your_wifi_password\"\n\n# OpenClaw gateway token\nopenclaw_gateway_token: \"tok_...\"\nopenclaw_gateway_password: \"your_gateway_password\"\n\n# OpenRouter API key (for OpenClaw)\nopenrouter_api_key: \"sk-or-...\"\n\n# DeepSeek API key (native provider). Lands in /run/hermes.env as DEEPSEEK_API_KEY.\n# https://platform.deepseek.com — used when Hermes provider is \"deepseek\".\ndeepseek_api_key: \"sk-...\"\n\n# Anthropic API key (for OpenClaw direct access)\nanthropic_api_key: \"sk-ant-...\"\n\n# Brave Search API key (for OpenClaw web search)\nbrave_search_api_key: \"BSA...\"\n\n# Telegram bot token (for OpenClaw channels)\ntelegram_bot_token: '123456:ABC...'\n\n# Telegram admin user ID (for OpenClaw elevated tool access)\ntelegram_admin_id: '123456789'\n\n# Composio self-hosted secrets\ncomposio_encryption_key: \"your_encryption_key\"\ncomposio_jwt_secret: \"your_jwt_secret\"\n\n# Google Workspace MCP (OAuth client credentials for OpenClaw)\ngoogle_workspace_client_id: \"261437751113-....apps.googleusercontent.com\"\ngoogle_workspace_client_secret: \"GOCSPX-...\"\ngoogle_places_api_key: \"AIzaSy...\"\n\n# OneDrive rclone config (full rclone config file content)\nonedrive_rclone_config: |\n [onedrive]\n type = onedrive\n token = {\"access_token\":\"...\",\"token_type\":\"Bearer\",\"refresh_token\":\"...\",\"expiry\":\"...\"}\n drive_id = ...\n drive_type = personal\n\n# Cloudflared tunnel credentials JSON\n# Prefer: ./scripts/setup-cloudflare-tunnel.sh (needs Account.Cloudflare Tunnel:Edit on the API token)\n# Manual: cloudflared tunnel create rocknas → paste ~/.cloudflared/<uuid>.json\ncloudflared_tunnel_credentials: |\n {\"AccountTag\":\"...\",\"TunnelID\":\"...\",\"TunnelSecret\":\"...\"}\n\n# Browserless.io API key (for OpenClaw browser automation)\nbrowserless_api_token: \"2TyGW...\"\n\n# Trello API key and token (for OpenClaw task management)\ntrello_api_key: \"your_trello_api_key\"\ntrello_api_token: \"your_trello_api_token\"\n\ngoogle_api_key: \"AIzaSy...\"\nmaton_api_key: \"bYGQw4F...\"\nha_token: \"key...\"\nha_url: \"http://127.0.0.1:8123\"\n\n# xAI API key (for OpenClaw Grok models)\nxai_api_key: \"xai-...\"\n\n# Cloudflare API token\n# Required: Zone.DNS:Edit (ACME DNS-01 + DDNS + tunnel hostname CNAMEs)\n# For tunnel bootstrap script also: Account.Cloudflare Tunnel:Edit\ncloudflare_dns_api_token: \"cf-...\"\n\n# FileBrowser admin password (plaintext)\nfilebrowser_password: \"your_secure_password\"\n\n# Comet (see containers/comet.nix)\n# - comet_admin_dashboard_password: required before exposing publicly (for /admin dashboard)\n# - torbox_api_key: only if using TorBox scraping/debrid\ncomet_admin_dashboard_password: \"your-strong-admin-password\"\ntorbox_api_key: \"tb_...\"\n\nclawhub_token: clh_It...\n\n# ZeroEntropy API key (GBrain embeddings — gbrain embed / dream)\nzeroentropy_api_key: \"ze_...\"\n\n# Firecrawl API key (Hermes web_extract / web scrape backend)\n# https://firecrawl.dev — lands in /run/hermes.env as FIRECRAWL_API_KEY\nfirecrawl_api_key: \"fc-...\"\n\n# Hermes OpenAI-compatible API server key (loopback clients).\n# Written to /run/hermes.env as API_SERVER_KEY.\n# Generate: openssl rand -hex 32\n# Do NOT reuse openrouter_api_key — that is for LLM routing, not the local API bearer.\nhermes_api_server_key: \"replace-with-openssl-rand-hex-32\"\n\n# ElevenLabs API key (Hermes WebUI server-side TTS + hermes .env).\n# Written to /run/hermes.env and /run/hermes-webui.env as ELEVENLABS_API_KEY.\nelevenlabs_api_key: \"sk_...\"\n\n# SSH private key: Hermes → unprivileged agent@nix-pc (Grok Build workstation).\n# Generate on the workstation (dotfiles system/agent/keys) and paste full PEM.\nnix_pc_agent_ssh_key: |\n -----BEGIN OPENSSH PRIVATE KEY-----\n ...\n -----END OPENSSH PRIVATE KEY-----\n"}}}} |