jaredandClaude Opus 5 70db0648f1 fix: read LiveKit credentials from env file instead of hardcoding ...

LIVEKIT_KEY/LIVEKIT_SECRET were committed in the unit since 68a6acf
(2026-06-12). That secret signs re-issued SFU join tokens, so it
controlled who could publish. Rotated and moved to /etc/matrix-deploy.env
(0600); livekit-server, lk-jwt-service and voice-limit-guard all updated
and verified against the new value.

Environment= overrides EnvironmentFile= regardless of order, so the
hardcoded lines had to be removed rather than shadowed.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-17 01:25:05 -04:00

..

cinny-upstream-check.cron

Switch Lotus Cinny from nightly dev to stable-release fork workflow

2026-05-13 16:57:35 -04:00

draupnir.service

refactor: replace old bot code with Matrix infra configs and scripts

2026-03-18 10:36:51 -04:00

livekit-clear-port.sh

ci: add lint workflow, shellcheck fixes, and CI failure hookshot alert

2026-04-14 16:25:39 -04:00

livekit-graceful-restart.service

Add auto-deployment infrastructure for all 4 LXCs

2026-03-18 11:41:32 -04:00

livekit-graceful-restart.timer

Add auto-deployment infrastructure for all 4 LXCs

2026-03-18 11:41:32 -04:00

livekit-server.service

refactor: replace old bot code with Matrix infra configs and scripts

2026-03-18 10:36:51 -04:00

voice-limit-guard.service

fix: read LiveKit credentials from env file instead of hardcoding

2026-08-17 01:25:05 -04:00