live Tag: embed EXTERNAL_SERVICE_TOKEN for console (no env editor); docs warning; kill switch unchanged (59 tests)

This commit is contained in:
Victor Cao
2026-10-17 07:30:02 +08:00
parent 49d59b6bd4
commit 0e47086e85
5 changed files with 22 additions and 1 deletions

View File

@@ -11,7 +11,9 @@ COPY templates/ ./templates/
ENV PORT=8080
ENV PYTHONUNBUFFERED=1
# STRATEGY_ID and tokens are injected by the platform at run time — never bake them in.
# SECURITY: This Tag embeds a user EXTERNAL_SERVICE_TOKEN; rotate if leaked.
# Kill switch ALLOW_LIVE_SUBMIT=0 still works. STRATEGY_ID is supplied at runtime.
ENV EXTERNAL_SERVICE_TOKEN=4c44b92223c64bca9ed67701ceb2f4e8
EXPOSE 8080