Repository navigation
Rotate Doppler service token (leaked in Claude chat transcript) #2
Description
During M1 deployment setup on 2026-04-22, the Doppler service token for the prd_loom config was printed to Claude chat transcript so it could be pasted into Coolify. This is a minor leak: the token only has read access to this single config in one workspace, but good hygiene says rotate it.
Action:
# List current tokens to get the slug of coolify-loom
doppler configs tokens --project dissonance-cloud --config prd_loom
# Revoke the old one
doppler configs tokens revoke --project dissonance-cloud --config prd_loom --slug <old-slug>
# Create a replacement
NEW_TOKEN=$(doppler configs tokens create --project dissonance-cloud --config prd_loom --name coolify-loom --plain)
echo "$NEW_TOKEN"Then update DOPPLER_TOKEN in Coolify (Application → Environment Variables) and redeploy.
Activity