docs: warn HEALTH_TOKEN must be runtime-only on Coolify #5

Merged
maximus merged 1 commit from issue-4-runtime-only-coolify-secrets into main 2026-05-03 20:12:25 +00:00

1 commit

Author SHA1 Message Date
le king fu
9510e96231 docs: warn HEALTH_TOKEN must be runtime-only on Coolify
Add inline warning in .env.example and CLAUDE.md Auth section:
HEALTH_TOKEN is read at runtime only — passing it as Coolify build ARG
leaks the secret in clear in application_deployment_queues.logs.

Refs #4

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-03 15:54:07 -04:00