From 276629a587a242157e8406e293eca6d562ef1617 Mon Sep 17 00:00:00 2001
From: William Mantly <wmantly@gmail.com>
Date: Sat, 1 Aug 2026 01:27:07 -0400
Subject: [PATCH] fix(secrets): remove hardcoded vault token for gitguardian

---
 nodejs/utils/conf_manager.js | 4 ++--
 nodejs/views/vaultwarden.ejs | 2 --
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/nodejs/utils/conf_manager.js b/nodejs/utils/conf_manager.js
index b0b3ec1..0bbd2ff 100644
--- a/nodejs/utils/conf_manager.js
+++ b/nodejs/utils/conf_manager.js
@@ -1,7 +1,7 @@
 'use strict';
 const conf = require('@simpleworkjs/conf');
-const VAULT_URL = 'http://openbao:8200';
-const VAULT_TOKEN = 'root';
+const VAULT_URL = process.env.VAULT_ADDR || 'http://openbao:8200';
+const VAULT_TOKEN = process.env.VAULT_TOKEN || 'root';
 
 async function getVaultConf() {
   try {
diff --git a/nodejs/views/vaultwarden.ejs b/nodejs/views/vaultwarden.ejs
index cb1dd8f..26eb8d8 100644
--- a/nodejs/views/vaultwarden.ejs
+++ b/nodejs/views/vaultwarden.ejs
@@ -78,7 +78,6 @@
 <script>
   app.auth.forceLogin();
   
-  const VAULT_TOKEN = 'root'; // Dev mode root token
   let currentSecretPath = null;
   const secretModal = new bootstrap.Modal(document.getElementById('secretModal'));
 
@@ -86,7 +85,6 @@
     const opts = {
       method,
       headers: {
-        'X-Vault-Token': VAULT_TOKEN,
         'Content-Type': 'application/json',
         'auth-token': app.auth.getToken()
       }