Files

T

windyboy a3ee8c09cf security: scrub live credentials from tracked notes; point values at Vaultwarden

- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
  placeholders across 24 files (review-named 12 + noise-audit finds:
  WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
  credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)

2026-09-26 12:26:57 +08:00

3.5 KiB

Raw Blame History

created, title

created	title
2026-04-10	zeroclaw

# zeroclaw

Project Overview

Start Date: {{date}} Target Completion: Status: Active

Objectives

Context

matrix 用户

claw

D929jA*&NrszMhm8

mat_A2hM8pXkqIQL4F8aMZQSvBNXFmTO1C_MvHpi3

wUkjnB82JD

EsT2 JSAG t5fR PZ9R nypV rHvF 8pYU tuum MqVb cdzA 47iw jFCy

curl -sS \
  -H "Authorization: Bearer mct_6RUEf8ecF2JawZPSJiHiBsnV5PWC5w_0Ytyq5" \
  "https://synapse.chans.xyz/_matrix/client/v3/account/whoami"

export ZEROCLAW_CONFIG=/opt/zeroclaw/.zeroclaw-docker/.zeroclaw/config.toml
export ZEROCLAW_WORKSPACE=/opt/zeroclaw/.zeroclaw-docker/workspace

vim /opt/zeroclaw/.zeroclaw-docker/.zeroclaw/config.toml

 curl -sS https://synapse.chans.xyz/_matrix/client/v3/login \
  -H 'Content-Type: application/json' \
  -d "{
    \"type\": \"m.login.password\",
    \"identifier\": {
      \"type\": \"m.id.user\",
      \"user\": \"$MATRIX_USER\"
    },
    \"password\": \"$MATRIX_PASSWORD\",
    \"initial_device_display_name\": \"ZeroClaw VPS\"
  }"

curl -sS \
  -H "Authorization: Bearer mat_A2hM8pXkqIQL4F8aMZQSvBNXFmTO1C_MvHpi3" \
  "https://synapse.chans.xyz/_matrix/client/v3/joined_rooms"

printf "Matrix password: "
read -rs MATRIX_PASSWORD
echo
export MATRIX_PASSWORD

[Unit]
Description=LiteLLM Proxy
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=windy
WorkingDirectory=/home/windy/tools/llm-proxy
EnvironmentFile=/home/windy/tools/llm-proxy/.env
ExecStart=/usr/bin/env /home/windy/.local/bin/uv run litellm --config /home/windy/tools/llm-proxy/config.yaml --port 4000 --host 127.0.0.1
Restart=always
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true

[Install]
WantedBy=multi-user.target

ZEROCLAW_CONFIG=/opt/myclaw/config.toml
ZEROCLAW_WORKSPACE=/opt/myclaw/workspace

[Unit]
Description=ZeroClaw Daemon
After=network-online.target litellm.service
Wants=network-online.target
Requires=litellm.service

[Service]
Type=simple
User=windy
WorkingDirectory=/opt/myclaw
EnvironmentFile=/opt/myclaw/zeroclaw.env
ExecStart=/usr/local/bin/zeroclaw daemon
Restart=always
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true

[Install]
WantedBy=multi-user.target

telegram bot token windyclaw_bot

{{SECRET_TELEGRAM_WINDYCLAW_BOT}}

curl -sS "https://api.telegram.org/bot{{SECRET_TELEGRAM_WINDYCLAW_BOT}}/getUpdates"

[channels_config.telegram]
bot_token = "{{SECRET_TELEGRAM_WINDYCLAW_BOT}}"
allowed_users = ["203688083"]

[channels_config.email]
imap_host = "mx2.windy.me"
imap_port = 993
imap_folder = "INBOX"

smtp_host = "mx2.windy.me"
smtp_port = 465
smtp_tls = true

username = "claw@windy.me"
password = "{{SECRET_CLAW_EMAIL_CLAW_WINDY_ME}}"
from_address = "claw@windy.me"

poll_interval_secs = 60
allowed_senders = ["*"]

allowed_senders = [  
"zhiqiang@windy.me",
"windyboy@gmail.com"  
]

Success Criteria

Key Resources

Progress Log

{{date}} - Project Initiated

Set up project structure
Initial research phase

Open Questions

Next Actions

Using Claude Code? Say: "I'm working on {{title}} in thinking mode. Let's explore."

3.5 KiB Raw Blame History