6 Commits

Include renames

Author	SHA1	Message	Date
clawbot	fc651abe46	Trust the RFC 1918 ranges as proxies when TRUSTED_PROXIES is unset (closes #333) ... Unset or empty, TRUSTED_PROXIES now defaults to 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16, so a reverse proxy reaching the app over a Docker network or a private LAN gets per-client rate-limit buckets without configuration. A set value replaces the default; an unparseable one still fails startup. The startup warning for an empty list goes, with its test hook and test, since the default is no longer empty. The README's configuration table, Trusted proxies, upaas and reverse-proxy sections describe the new default and when to narrow it to the proxy alone. Model: opus-5-5	2026-09-29 07:29:26 +00:00
clawbot	b9f7db6901	Fail loudly on an unparseable SENTRY_DSN and a malformed .env (closes #283)	2026-08-24 04:25:29 +02:00
clawbot	62576f6fc6	Bind the app port deliberately and document the proxy deployment (closes #268) (closes #226)	2026-08-24 03:38:44 +02:00
clawbot	03cd1859d7	Add an egress CIDR allowlist to the SSRF guard (closes #204) (#217)	2026-08-20 10:34:42 +02:00
clawbot	d8f9d149b5	Warn when TRUSTED_PROXIES is empty in production (closes #149) ... With no trusted proxies configured, every client behind the reverse proxy production requires shares one rate-limit bucket per limit, so five POSTs per minute from anywhere holds the login limit full and denies the admin login until restart. The default is still correct; it was the consequence that was invisible. Startup now warns, and the README no longer claims the login limit is per-IP unconditionally.	2026-08-12 13:49:39 +02:00
clawbot	45890d4f82	Fail loudly on set-but-unparseable env config values (closes #80) (#92) ... Defaults now apply only to unset or empty environment variables; a set-but- unparseable value aborts startup with an error naming the key and the value. envInt is gone, envBool parses with strconv.ParseBool, and PORT is bounded.	2026-08-10 16:06:12 +02:00