docs: API token issued+verified — ask 1 answered [#727]

.env.example refs updated (issued 2026-09-02), questions-v1 #1 marked
answered. Material value lives only in ~/.creds/cloudron.env (0600).
Meat: https://projects.knownelement.com/issues/727#note-3928
This commit is contained in:
2026-09-02 19:07:28 -05:00
parent 4806e6f24d
commit d9d512c9f1
2 changed files with 7 additions and 8 deletions
+3 -6
View File
@@ -1,13 +1,10 @@
# KNEL/cloudron — credential REFS only. # KNEL/cloudron — credential REFS only.
# Material secrets live in ~/.creds (0600). NEVER commit real values here. # Material secrets live in ~/.creds (0600). NEVER commit real values here.
# #
# Pending founder ask (#685/#727): Cloudron API token. # Issued 2026-09-02; material value lives in ~/.creds/cloudron.env (0600, never here).
# When issued, store the material value in ~/.creds/cloudron.env as:
# CLOUDRON_API_TOKEN=<token>
CLOUDRON_API_TOKEN= CLOUDRON_API_TOKEN=
# Uptime Kuma (monitoring/kuma-cloudron-sync.py) — material value in ~/.creds/uptime-kuma.env CLOUDRON_API_USERNAME=
# UPTIME_KUMA_URL= CLOUDRON_URL=
# UPTIME_KUMA_TOKEN=
# Uptime Kuma (monitoring/kuma-cloudron-sync.py) — material value in ~/.creds/uptime-kuma.env # Uptime Kuma (monitoring/kuma-cloudron-sync.py) — material value in ~/.creds/uptime-kuma.env
# UPTIME_KUMA_URL= # UPTIME_KUMA_URL=
# UPTIME_KUMA_TOKEN= # UPTIME_KUMA_TOKEN=
+4 -2
View File
@@ -11,10 +11,12 @@ panel API token exists. A token lets the agent use the Cloudron API (apps,
configs, backups) instead of shell — cleaner audit trail, and the path for configs, backups) instead of shell — cleaner audit trail, and the path for
future AWX/Ansible modules. future AWX/Ansible modules.
- [ ] Create an API token (panel: my.knownelement.com → your profile → API - [x] Create an API token (panel: my.knownelement.com → your profile → API
access, or `cloudron token create` via CLI) with read scope at minimum access, or `cloudron token create` via CLI) with read scope at minimum
- [ ] Drop the material value in `~/.creds/cloudron.env` as — received 2026-09-02
- [x] Drop the material value in `~/.creds/cloudron.env` as
`CLOUDRON_API_TOKEN=<token>` (never in this repo) `CLOUDRON_API_TOKEN=<token>` (never in this repo)
— stored 0600; verified: profile → mrcharles, apps list → 200
## 2. docker daemon.json bounce window (see README "Ground truth") ## 2. docker daemon.json bounce window (see README "Ground truth")