95d843d7dc
README: move hosted-instance decision note to private ops notes; clarify REGISTER_MANUAL_CONFIRM scope
2026-10-15 21:10:40 +08:00
56ed6a277c
README: record owner decision to skip the edge gate on the hosted instance; REGISTER_MANUAL_CONFIRM as emergency switch
2026-10-15 20:59:18 +08:00
dcfeb12c68
Re-review fixes: EGRESS_MODE=lax on Gitea 28, basic-auth prod gate, pinned sha256, kit-owned down
...
- app.ini.template: [security] EGRESS_MODE = lax (ALLOWED_HOST_LIST=external is invalid on 28.1.0)
- README: egress rows for 28 vs 1.23; rollout gate while password basic auth is on (edge 429 on
Authorization: Basic to /api/v1/ and git HTTP, or tokens first)
- kit.sh: pinned sha256 per arch for 28.1.0; down stops only its own pid or the unit it installed
- e2e: package upload must be 404; 'denied by egress' polled from the Gitea log; 4 MB attachment
cap; Actions off; fail on [E] / 'invalid entry'; listener cleaned up in trap
2026-10-15 20:57:10 +08:00
c8d58daabf
Review fixes: ALLOWED_HOST_LIST explicit, no password basic auth, bounded storage, rollout order, adversarial e2e
...
- drop EGRESS_MODE; [security] ALLOWED_HOST_LIST = external (Gitea 28+; [webhook] on 1.23)
- ENABLE_BASIC_AUTHENTICATION = false (tokens still work); e2e clones with the token
- packages and Actions off; attachments and web uploads capped at 4 MB / 3 files
- README: rollout order (edge rate limit first, verify, then captcha off; rollback),
storage notes (proxy body cap, disk alert, user purge), REGISTER_MANUAL_CONFIRM emergency
switch, EMAIL_DOMAIN_ALLOWLIST/BLOCKLIST, known gaps (email enumeration, /join reserved names)
- e2e: password basic auth refused (API + git push), token works, 11th repo / org / package
refused, webhook to 127.0.0.1 not delivered, sign-up burst marked PENDING (edge rule)
2026-10-15 20:40:56 +08:00
6df3136409
Agent-native sign-up: drop the captcha, document non-captcha abuse controls
2026-10-15 20:36:47 +08:00
2548ea8339
Merge pull request 'Explore: list .profile contact-card repos last' ( #3 ) from explore-profile-last into main
2026-10-15 20:33:27 +08:00
7dade62778
README: admin per-user view uses this template; .profile-private out of scope
2026-10-15 20:33:26 +08:00
4289b8ac35
Follow-up: raise paging to 100, case-insensitive .profile, row sub-template, README notes
...
Earlier commit 7a16ae0 'x' added the first README section for this change; it is kept
rather than force-pushing the open PR branch.
2026-10-15 20:27:07 +08:00
6d9dbf40ec
Explore: list .profile contact-card repos last (template override)
2026-10-15 20:23:37 +08:00
7a16ae0eef
x
2026-10-15 20:23:37 +08:00
17f88f2512
Merge pull request 'README: link the hosted instance, contributing notes' ( #2 ) from docs/live-links into main
2026-10-10 08:36:30 +08:00
04253d60ed
README: link the hosted instance, contributing notes
2026-10-10 08:36:11 +08:00
ab7fdd50d7
Merge pull request 'Self-host kit: compose + binary/systemd, app.ini template, kit.sh, e2e test' ( #1 ) from initial-kit into main
2026-10-08 22:09:11 +08:00
67c23e9561
Add self-host kit: compose + binary/systemd, app.ini template, kit.sh, e2e test, MIT license
2026-10-08 22:08:55 +08:00
47fbd4bb11
Initial commit
2026-10-08 22:08:50 +08:00
