security: harden API server key placeholder handling (#30738)

2026-05-24 04:25:32 -07:00
parent 2df2f9190b
commit be27bfed01
3 changed files with 15 additions and 1 deletions
--- a/website/docs/user-guide/docker.md
+++ b/website/docs/user-guide/docker.md
@@ -51,7 +51,7 @@ docker run -d \
  -p 8642:8642 \
  -e API_SERVER_ENABLED=true \
  -e API_SERVER_HOST=0.0.0.0 \
-  -e API_SERVER_KEY=your_api_key_here \
+  -e API_SERVER_KEY="$(openssl rand -hex 32)" \
  -e API_SERVER_CORS_ORIGINS='*' \
  nousresearch/hermes-agent gateway run
 ```