docs(secrets): document Infisical secrets read by this repo

Add/standardize a ## Secrets section listing the vault_* keys pulled from Infisical at deploy time, grouped by folder. Part of a fleet-wide README secrets-documentation sweep.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
This commit is contained in:
Your Name
2026-07-06 21:36:32 -04:00
co-authored by Claude Opus 4.8
parent f33aad89a2
commit 498695c053
+9
View File
@@ -75,6 +75,15 @@ Two services on one LXC, sharing one Claude Max OAuth subscription:
-d '{"model":"claude-haiku-4-5","max_tokens":40,"messages":[{"role":"user","content":"reply with the single word: pong"}]}'
```
## Secrets
Pulled from Infisical at deploy time (`infisical.vault.read_secrets` in `site.yml`):
**`/meridian/`**
- `vault_litellm_master_key` — LiteLLM proxy master key (required; sanity-checked in `site.yml`)
- `vault_openai_api_key` — OpenAI key for LiteLLM `direct_*` models (optional, `default('')`)
- `vault_gemini_api_key` — Gemini key for LiteLLM `direct_*` models (optional, `default('')`)
## Wiring a client
| Client type | Endpoint | Auth |