mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
feat(media): write per-upload-event records for moderation (#1551)
Signed-off-by: Bradley Axen <baxen@squareup.com> Signed-off-by: npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7 <6e30cd56c30e030cd31bb0939b94a7c257c9a09d5ba2d92cf2735da45629f248@sprout-oss.stage.blox.sqprod.co> Co-authored-by: npub1ty04d6th3jzvggd25za6xmqrh99g42kvkvqsmf7ydv793fgyxa3s3t2lw7 <591f56e9778c84c421aaa0bba36c03b94a8aaaccb3010da7c46b3c58a5043763@sprout-oss.stage.blox.sqprod.co> Co-authored-by: npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7 <6e30cd56c30e030cd31bb0939b94a7c257c9a09d5ba2d92cf2735da45629f248@sprout-oss.stage.blox.sqprod.co>
This commit is contained in:
co-authored by
npub1ty04d6th3jzvggd25za6xmqrh99g42kvkvqsmf7ydv793fgyxa3s3t2lw7
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
parent
19919e1810
commit
83fc30b14d
@@ -85,6 +85,15 @@ spec:
|
||||
{{- if gt (.Values.relay.ephemeralTtlOverride | int) 0 }}
|
||||
- { name: BUZZ_EPHEMERAL_TTL_OVERRIDE, value: {{ .Values.relay.ephemeralTtlOverride | quote }} }
|
||||
{{- end }}
|
||||
{{- if .Values.relay.uploadRecords }}
|
||||
- { name: BUZZ_MEDIA_UPLOAD_RECORDS, value: "true" }
|
||||
{{- end }}
|
||||
{{- if .Values.relay.uploadIpHeader }}
|
||||
- { name: BUZZ_MEDIA_UPLOAD_IP_HEADER, value: {{ .Values.relay.uploadIpHeader | quote }} }
|
||||
{{- end }}
|
||||
{{- if .Values.relay.uploadPortHeader }}
|
||||
- { name: BUZZ_MEDIA_UPLOAD_PORT_HEADER, value: {{ .Values.relay.uploadPortHeader | quote }} }
|
||||
{{- end }}
|
||||
|
||||
# ── Owner ────────────────────────────────────────────────
|
||||
- { name: RELAY_OWNER_PUBKEY, value: {{ .Values.ownerPubkey | quote }} }
|
||||
|
||||
@@ -84,6 +84,17 @@ relay:
|
||||
# accepts/owns the external multi-pod audio/SFU behavior.
|
||||
huddleAudioAvailable: null
|
||||
ephemeralTtlOverride: 0
|
||||
# Per-upload-event records (`_uploads/` moderation side channel). Off by
|
||||
# default. Operators hosting communities for other people may have legal
|
||||
# obligations (e.g. NCMEC reporting for US-serving providers) that require
|
||||
# recording the network address of an upload; Buzz never collects IPs unless
|
||||
# uploadIpHeader is set. When set (e.g. "cf-connecting-ip"), the connecting
|
||||
# address reported by YOUR trusted edge is stored in the per-event record
|
||||
# only — never served to clients, never in event data. uploadRecords must be
|
||||
# true for uploadIpHeader to be valid (startup-checked).
|
||||
uploadRecords: false
|
||||
uploadIpHeader: ""
|
||||
uploadPortHeader: ""
|
||||
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
@@ -211,7 +222,7 @@ postgresql:
|
||||
enabled: true
|
||||
size: 10Gi
|
||||
externalPostgresql:
|
||||
url: "" # postgres://user:pass@host:5432/db
|
||||
url: "" # postgres://user:pass@host:5432/db — placeholder example, sadscan:disable np.postgres.1
|
||||
|
||||
# ── Redis ────────────────────────────────────────────────────────────────────
|
||||
# Eval-only CloudPirates subchart (standalone). REDIS_URL is composed in the
|
||||
|
||||
Reference in New Issue
Block a user