From 498695c05335e6d013bd00ca337419c75a866b36 Mon Sep 17 00:00:00 2001 From: Your Name Date: Mon, 6 Jul 2026 21:36:32 -0400 Subject: [PATCH] docs(secrets): document Infisical secrets read by this repo Add/standardize a ## Secrets section listing the vault_* keys pulled from Infisical at deploy time, grouped by folder. Part of a fleet-wide README secrets-documentation sweep. Co-Authored-By: Claude Opus 4.8 --- README.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/README.md b/README.md index 54ebee6..8620a0b 100644 --- a/README.md +++ b/README.md @@ -75,6 +75,15 @@ Two services on one LXC, sharing one Claude Max OAuth subscription: -d '{"model":"claude-haiku-4-5","max_tokens":40,"messages":[{"role":"user","content":"reply with the single word: pong"}]}' ``` +## Secrets + +Pulled from Infisical at deploy time (`infisical.vault.read_secrets` in `site.yml`): + +**`/meridian/`** +- `vault_litellm_master_key` — LiteLLM proxy master key (required; sanity-checked in `site.yml`) +- `vault_openai_api_key` — OpenAI key for LiteLLM `direct_*` models (optional, `default('')`) +- `vault_gemini_api_key` — Gemini key for LiteLLM `direct_*` models (optional, `default('')`) + ## Wiring a client | Client type | Endpoint | Auth |