External/roboco
1
0
Fork 0
mirror of https://github.com/rennf93/roboco.git synced 2026-08-03 07:23:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: post-finale completeness sweep — routing surface, provider config, budgets, compose env, interactive exemption (#661)

Browse Source
This commit is contained in:
Renzo F
2026-07-23 09:41:27 +02:00
committed by GitHub
parent 21d6730400
commit d4b7e1e7b8
45 changed files with 2064 additions and 256 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker-compose.registry.yml
+8
View File
@@ -447,6 +447,14 @@ services:
# omitted — inert while guard stays off by default, but reaches the
# container the moment an operator arms guard by hand-editing this file.
ROBOCO_GUARD_EMERGENCY_WHITELIST: ${ROBOCO_GUARD_EMERGENCY_WHITELIST:-}
# Trusted local-proxy hop IPs (docker bridge gateway) for the XFF
# real-client resolver — carried here (inert until guard is armed) so a
# gateway-fronted Tailscale Serve deploy can set it via .env rather than
# hand-editing this file. Same reach-the-container rule as above.
ROBOCO_GUARD_TRUSTED_CHAIN_PEERS: ${ROBOCO_GUARD_TRUSTED_CHAIN_PEERS:-}
# Per-task/project cost budgets (default-off; conservative registry
# posture, unlike the build compose which arms it).
ROBOCO_TASK_BUDGETS_ENABLED: ${ROBOCO_TASK_BUDGETS_ENABLED:-false}
# Cloud auth (FastAPI Users): login-gates the panel/API when exposed
# beyond localhost. OFF by default (matches config default, unlike the
# build compose which arms it for the personal deploy). Set