cfa49c6e78
Map NANOBOT_WEB_TOKEN to channels.websocket.tokenIssueSecret instead of the static token, and remove the static token. The gateway now issues short-lived WebSocket/API tokens rather than accepting a long-lived credential directly at the handshake, matching the public-WebUI login flow and documentation. Users still enter the same NANOBOT_WEB_TOKEN, and websocketRequiresToken remains true. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
34 lines
603 B
JSON
34 lines
603 B
JSON
{
|
|
"agents": {
|
|
"defaults": {
|
|
"model": "anthropic/claude-opus-4-8",
|
|
"provider": "auto"
|
|
}
|
|
},
|
|
"providers": {
|
|
"anthropic": {
|
|
"apiKey": "${ANTHROPIC_API_KEY}"
|
|
}
|
|
},
|
|
"gateway": {
|
|
"host": "127.0.0.1",
|
|
"port": 18790
|
|
},
|
|
"channels": {
|
|
"websocket": {
|
|
"enabled": true,
|
|
"host": "0.0.0.0",
|
|
"port": 8765,
|
|
"tokenIssueSecret": "${NANOBOT_WEB_TOKEN}",
|
|
"websocketRequiresToken": true
|
|
}
|
|
},
|
|
"tools": {
|
|
"restrictToWorkspace": true,
|
|
"webuiAllowRemotePackageInstall": false,
|
|
"my": {
|
|
"allowSet": false
|
|
}
|
|
}
|
|
}
|