hermes/agent-secret-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
49 Commits 1 Branch 0 Tags
d0ac6db8aa3695837acb977e297585ca53dd169c
Commit Graph
49 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
XiaoNan d0ac6db8aa fix(vault): quote mailgun_sandbox note to fix YAML parse 
- note contained colon and caused yaml.safe_load to fail in get-secret.sh
 2026-09-03 11:01:57 +08:00
XiaoNan 9913e88b27 feat(vault): add mailgun_sandbox as backup for smtp2go_mc4 
- domain sandboxa4549b6ba4654d379af3765fcdde98a2.mailgun.org, login mc_agents@..., api dc40... / sending_key 61c1...
- 4 authorized recipients verified 2026-09-03: alice_mc_claw@outlook.com, eric.chang@kumon-km.com.tw, mc@mc4.us, chang0206@gmail.com (limit 5)
- role backup, note SMTP 421 requires activation, API works
 2026-09-03 11:01:29 +08:00
XiaoNan ec36a1e16f feat(vault): update smtp2go_mc4 to agents_notification 
- username mc4.us -> agents_notification
- password eaNJtokvE9e5 -> dT1am3BSU9h4RZA6 (per Eric 2026-09-03)
- re-verified SMTP 2525 STARTTLS login + send 250 OK id=1x1xJK-FnQW0hPl9Om-YsUb to eric.chang@kumon-km.com.tw
 2026-09-03 10:36:25 +08:00
XiaoNan 308a5b921a feat(vault): add telegram_bots (leeahyoung_bot + agent_NMJ_bot) 
- leeahyoung_bot 8961820722:AAHg...OU64 for 阿勇 192.168.17.123, Eric chat 864811879 (added 2026-09-03)
- xiaonan_bot 8978525850:AAE2...Flw for 小南 192.168.100.123
 2026-09-03 10:32:24 +08:00
XiaoNan 0b536694ec feat(vault): add smtp2go_mc4 (mail.smtp2go.com via mc4.us) as preferred mail relay 
- SMTP host mail.smtp2go.com:2525 STARTTLS (alt 8025/587/80/25 TLS, 465/8465/443 SSL)
- username mc4.us, sender_default test@mc4.us, verified 2026-09-03 SMTP 250 OK id=1x1wot-4o5NDgrjOgB-tIyW + API email_id 1x1wpM-FnQW0hQ0Xk8-kn7T
- stored as smtp2go_mc4 (top-level) + openclaw_alice.http_nodes.smtp2go_mc4
 2026-09-03 10:12:06 +08:00
XiaoNan 64061d486c security: rotate outlook_alice app password (smtp-mail.outlook.com, 2026-09-03) 2026-09-03 09:58:12 +08:00
XiaoNan e4171959b8 security: rotate gitea openclaw PAT (RCE incident 2026-09-02, revoke 49a5... -> 88b4...) 2026-09-02 10:22:54 +08:00
user.email 74cec3583d security: rotate openclaw Gitea PAT 2026-09-01 15:14:30 +08:00
user.email 67f4932ebd docs: point to ~/agent-secret-vault (unified home, ~/projects copy removed) 2026-08-13 15:56:54 +08:00
hermes 2e35c69e78 security: rotate KM Gitea API token (192.168.100.2:4000) 2026-08-13 15:42:00 +08:00
hermesandCommandCodeBot ba82787ba5 Ignore plaintext vault dumps 
Co-authored-by: CommandCodeBot <noreply@commandcode.ai>
 2026-08-13 10:41:28 +08:00
Alice (OpenClaw) 4ca6a3611d docs: remove completed age migration section from flowchart 2026-08-06 16:55:58 +08:00
Alice (OpenClaw) f3965bd045 docs: update flowchart - mark age-to-ansible-vault migration as completed, update secret structure 2026-08-06 16:54:54 +08:00
Alice (OpenClaw) 2cd4ad0b11 security: remove plaintext vault.yml.text from repo 2026-08-06 16:48:23 +08:00
Alice (OpenClaw) b4d8f377a2 feat: add kumon_com_tw.cloudflare_r2 with bucket deyu-imgbed 2026-08-06 16:39:47 +08:00
Alice (OpenClaw) 956d2fd719 feat: add KM_gitea credentials to vault 2026-08-06 16:00:02 +08:00
Alice (OpenClaw) 1bc9c81bf8 feat: sync full vault content from vault.yml.text 
- Merged all secrets from vault.yml.text into vault.yml
- Includes: openclaw_alice (http_nodes, ssh_nodes, cowbay_provider, infra), gitea
- Encrypted with ansible-vault
 2026-08-06 15:50:59 +08:00
Alice (OpenClaw) c8e8f60039 docs: add flowchart for vault setup and usage workflow 2026-08-06 15:33:02 +08:00
Alice (OpenClaw) b98aa2898a feat: add kumon.com.tw cloudflare_r2 credentials to vault 2026-08-06 15:31:52 +08:00
Alice (OpenClaw) 0c4799aae3 chore: convert vault.yml from age to ansible-vault encryption 
- vault.yml was age-encrypted but scripts use ansible-vault commands
- Converted to ansible-vault format so vault.sh and get-secret.sh work
- Added encryption format change log to docs/secret-vault.md
- Verified: vault.sh view and get-secret.sh both working
 2026-08-06 15:26:11 +08:00
hermes b0abb74c66 Add google_ai_studio API key to vault 2026-06-25 11:52:11 +08:00
hermes 2c7a4e7c3c add bynara router provider credentials 2026-06-24 11:34:20 +08:00
hermes 351e735a43 Add Twinkle Hub MCP secret 2026-06-03 08:12:57 +08:00
hermes f6891c5be5 Sync vault from vault.yml.text 2026-05-22 16:36:44 +08:00
hermes 209420f60d Clarify zip password file diagnostics 2026-05-15 08:22:17 +08:00
hermes 0730eb1d01 Handle binary zip password files in installer 2026-05-15 08:18:07 +08:00
hermes 97d0e3960e Document installer env variables 2026-05-14 21:03:48 +08:00
hermes 73bdbd7a20 Clarify env-first install docs 2026-05-14 20:31:58 +08:00
hermes 7fa14229a3 Add installer env preflight 2026-05-14 20:26:20 +08:00
hermes 525161dd0c Add installer env configuration 2026-05-14 17:29:29 +08:00
hermes 1cd0bfb9f2 Add non-interactive vault pass install modes 2026-05-14 15:45:16 +08:00
hermes ea1bb0979f Improve vault password installer options 2026-05-14 15:15:10 +08:00
hermes 3a67b253d8 Document agent secret vault installation 2026-05-14 15:03:29 +08:00
hermes c74aef7b7d Rename HQS MSSQL secret to HQS016 2026-04-27 17:36:28 +08:00
hermes c96299c204 Update HQS014 MSSQL server IP 2026-04-27 17:34:19 +08:00
hermes ff75cced31 Add HQS014 MSSQL observer secret 2026-04-27 17:20:20 +08:00
hermes a7729fac4e Add HQS virtualization infrastructure secrets 2026-04-27 12:22:00 +08:00
hermes b60841014c Add WordPress application password 2026-04-27 09:30:38 +08:00
hermes 7478747b70 Add WordPress cowbay credentials 2026-04-27 09:23:02 +08:00
hermes 24b1982e1e Add i.excen.one image host token 2026-04-27 08:55:32 +08:00
hermes 75dd33ef06 Add i.excen.one image host credentials 2026-04-27 08:54:05 +08:00
hermes 60ea4485aa Add Multica self-host PAT/url/workspace_id 2026-04-26 13:49:14 +08:00
hermes 79b88a7c9d Update Alice Gitea credentials and SSH key 2026-04-23 11:32:46 +08:00
hermes c5d4c3c806 Update Gitea secrets for OpenClaw Alice 2026-04-22 08:33:13 +08:00
hermes 92f72de5c1 Add cowbay_provider config with API keys 2026-04-14 13:06:54 +08:00
hermes b1d70cd864 Add ntu_webmail secret 2026-04-13 18:11:47 +08:00
hermes b7e21618ae feat: add agent integration guide and get-secret/render-env tools 2026-04-13 15:59:43 +08:00
hermes 9a783713cd feat: add openclaw_alice secrets from secrets_for_alice.json 2026-04-13 15:57:41 +08:00
hermes 5c46775124 feat: initialize ansible-vault secret repository 2026-04-13 15:49:48 +08:00