API Keys & Rotation
All API keys stored in Cloudflare Pages environment variables (encrypted at rest).
Key Inventory
Section titled “Key Inventory”| Key Name | Service | Rotation Schedule | Last Rotated |
|---|---|---|---|
LANGFLOW_API_KEY | Langflow | 90 days | 2026-02-15 |
UNIFI_API_KEY | UniFi Cloud | 90 days | 2026-02-10 |
RECEIPT_API_KEY | Receipt API | 90 days | 2026-02-18 |
HEALTH_CLIENT_ID | CF Access Service Token | 180 days | 2026-01-05 |
HEALTH_CLIENT_SECRET | CF Access Service Token | 180 days | 2026-01-05 |
Rotation Procedure
Section titled “Rotation Procedure”- Generate new key in service (Langflow/UniFi/Receipt API)
- Update Cloudflare Pages → Settings → Environment variables
- Deploy site (triggers rebuild with new env vars)
- Verify new key works by testing endpoints
- Revoke old key in service
- Update “Last Rotated” date in
docs/SECURITY.md