External/roboco
1
0
Fork 0
mirror of https://github.com/rennf93/roboco.git synced 2026-08-03 07:23:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

docs(rag): fix the KB security env-var reference

Browse Source 
config-reference.md (indexed into the KB agents trust at runtime)
documented a non-existent ROBOCO_SECRET_KEY/JWT and token-expiry setting
and omitted the real one. Replace the Security table with the actual env
vars — ROBOCO_ENCRYPTION_KEY (Fernet), ROBOCO_AGENT_AUTH_SECRET,
ROBOCO_AGENT_AUTH_REQUIRED, ROBOCO_PANEL_AGENT_TOKEN — and drop the
phantom Logging/Sessions sections (no backing config fields).
This commit is contained in:
Renn F
2026-06-05 17:08:08 +02:00
parent 073c2ec8b5
commit 416356899d
1 changed files with 4 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/rag/architecture/config-reference.md
+4 -17
View File
@@ -66,20 +66,7 @@ Environment variables for RoboCo (prefix: `ROBOCO_`).
| Variable | Default | Description |
|----------|---------|-------------|
| `ROBOCO_SECRET_KEY` | (required) | JWT signing key (32+ chars) |
| `ROBOCO_ACCESS_TOKEN_EXPIRE_MINUTES` | `1440` | Token expiry (24 hours) |
## Logging
| Variable | Default | Description |
|----------|---------|-------------|
| `ROBOCO_LOG_LEVEL` | `INFO` | DEBUG/INFO/WARNING/ERROR/CRITICAL |
| `ROBOCO_LOG_FORMAT` | `json` | json or console |
## Sessions
| Variable | Default | Description |
|----------|---------|-------------|
| `ROBOCO_SESSION_DEFAULT_TIMEOUT_SECONDS` | `300` | Session timeout |
| `ROBOCO_SESSION_MAX_MESSAGE_COUNT` | `100` | Max messages per session |
| `ROBOCO_MESSAGE_MAX_LENGTH` | `10000` | Max message length |
| `ROBOCO_ENCRYPTION_KEY` | (required) | Fernet key that encrypts secrets at rest (e.g. per-project git tokens). Generate with `Fernet.generate_key()`. |
| `ROBOCO_AGENT_AUTH_SECRET` | (required) | HMAC secret the orchestrator signs each agent's `X-Agent-Token` with. |
| `ROBOCO_AGENT_AUTH_REQUIRED` | `false` | When `true`, every request must carry a valid agent token (secure mode). |
| `ROBOCO_PANEL_AGENT_TOKEN` | (unset) | The control panel's CEO token, injected by nginx in secure mode. Get it with `make panel-token`. |