Sulkta-Coop/adacam-api
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Rotate AdaMaps ingest+read keys (env-required, no inline default)

Browse source 
Previous values (adamaps-ingest-2026, adamaps-read-2026, mapnet-ingest-2026)
were inline defaults across adamaps + adacam-api + varroa. The ingest key
was briefly anon-visible during the 2026-05-27 Forgejo public-flip when
adacam-api + varroa were public for a short window before the leak was
spotted.

New values live in Vaultwarden:
  - AdaMaps — API_KEY (ingest)
  - AdaMaps — READ_KEY

Validators now hard-fail at boot if the env var is missing. Service is
on hold today; when it resumes, both env vars must be set.
This commit is contained in:
Cobb Hayes 2026-05-27 09:17:22 -07:00
parent 595c1cadf5
commit 81a6d18c1d
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -41,7 +41,7 @@ Config file: `/data/adacam/config.json`
```json ```json
{ {
"device_id": "auto-generated UUID", "device_id": "auto-generated UUID",
"adamaps_key": "adamaps-ingest-2026", "adamaps_key": "<your-adamaps-ingest-key>",
"adamaps_api": "https://api.adamaps.org", "adamaps_api": "https://api.adamaps.org",
"ap_interface": "wlp1s0f0", "ap_interface": "wlp1s0f0",
"tunnel_host": "", "tunnel_host": "",

2
adacam_api/config.py
View file

@ -8,7 +8,7 @@ FIRMWARE_VERSION = "adacam-1.0.0"
_defaults = { _defaults = {
"device_id": None, "device_id": None,
"adamaps_key": "adamaps-ingest-2026", "adamaps_key": "",
"adamaps_api": "https://api.adamaps.org", "adamaps_api": "https://api.adamaps.org",
"ap_interface": "wlp1s0f0", "ap_interface": "wlp1s0f0",
"tunnel_host": "", "tunnel_host": "",