runlight 0.1.8 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 6f318cf843e2b5353ddb78dc0ca5e50e226d8cdfaab2334f137c152dc2977e05
4
- data.tar.gz: 476032f24ea078e9cc7dae3e26a7b7ca95f39c31792d98580d5d3838e666b23c
3
+ metadata.gz: 96dea1ab322bf62e661b46ccd86e15e0960c8a9226c88b477bded970616e97a8
4
+ data.tar.gz: 30503c03229623b39358ed2ed6bcb892c5ef1ab41f5ab25a255a649d830535be
5
5
  SHA512:
6
- metadata.gz: 74d813a0578b6af5548cc5f49578d6b4c27f514e6b627e033aaf623e4aad42e4231203b3f27eb98d87c044b23e6c612ac7597fc904da5300fac938f1e567c882
7
- data.tar.gz: 32d1b9d39b78a16c9a3205adda8ad0faa80ef9e57efd5306c85a950b05a26ade8122e58bd6987d73dcaa9b7a933c63506274fee331c888210426596a2d2b1aa5
6
+ metadata.gz: 33b59c9f8cb07413d1092218c32c7a0ce8327d9515d4b702b3bdff42d5d15c1ecc32f8d9bd4bac1ab22a3a604acd0ad6369732209a5cb0c124f7988c01e1a358
7
+ data.tar.gz: 0e3ef13f7155e0231f96d95c8b8a10d89fda13e7dc6e797cbbbc5067a2289393244497f170ec3396f09c25df27cb88aea83ecca7dfb3f204d8178e30a43aff1a
data/README.md CHANGED
@@ -22,7 +22,7 @@ The generator writes `config/initializers/runlight.rb`, where you set the site
22
22
 
23
23
  Set `RUNLIGHT_TOKEN` to a long random string, then open `/runlight/?token=` followed by that string to sign in. Run `bin/rails runlight:check` every few minutes for the email reports and upkeep.
24
24
 
25
- If nothing sits in front of your app (no load balancer, CDN, or reverse proxy), add `trust_proxy: false` beside `store:` and `site:` (in `Runlight.configure` or `Runlight.new`), so a visitor cannot pick their own address with an `X-Forwarded-For` header. Runlight logs a warning once when it sees requests arrive that way with the default left on.
25
+ By default Runlight reads the visitor's address from `X-Forwarded-For` (and `X-Real-IP` or `CF-Connecting-IP`) only when the request reaches your app from this computer or a private network, where a reverse proxy or load balancer connects from, so a visitor who reaches the app straight from the internet cannot pick their own address. Behind a CDN that connects from public addresses, such as Cloudflare in front of your app, add `trust_proxy: "cf-connecting-ip"` (the header it sets) or `trust_proxy: true` beside `store:` and `site:` (in `Runlight.configure` or `Runlight.new`); Runlight logs a warning once when a public address sends those headers with the default left on. `trust_proxy: false` never reads them.
26
26
 
27
27
  ## Rack
28
28
 
data/assets/build.json CHANGED
@@ -1,10 +1,10 @@
1
1
  {
2
2
  "note": "Written by scripts/ruby-assets.mts from the TypeScript SDK's generated files. Do not edit.",
3
- "version": "0.1.8",
3
+ "version": "0.3.0",
4
4
  "apiVersion": 1,
5
- "dashboardHash": "cf90e2a5eb0f",
5
+ "dashboardHash": "89287c3e896f",
6
6
  "worldHash": "4422113781f8",
7
- "localesHash": "9bccba77d5f4",
7
+ "localesHash": "0a7b5e462a6b",
8
8
  "trackerHash": "52fcb1901ce5",
9
9
  "icon": "data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A//www.w3.org/2000/svg%22%20viewBox%3D%220%200%2032%2032%22%3E%3Cstyle%3E.h%7Bfill%3A%23000%7D.r%7Bstroke%3A%23fff%7D%40media%20%28prefers-color-scheme%3Adark%29%7B.h%7Bfill%3A%23fff%7D.r%7Bstroke%3A%23000%7D%7D%3C/style%3E%3Crect%20class%3D%22h%22%20x%3D%222.5%22%20y%3D%222.5%22%20width%3D%2227%22%20height%3D%2227%22%20rx%3D%227%22/%3E%3Cpath%20class%3D%22r%22%20d%3D%22M11%2023V9h6.2a4.3%204.3%200%200%201%200%208.6H11m6%200%205%205.4%22%20fill%3D%22none%22%20stroke-width%3D%222.8%22%20stroke-linecap%3D%22round%22%20stroke-linejoin%3D%22round%22/%3E%3Ccircle%20cx%3D%2223.6%22%20cy%3D%228.4%22%20r%3D%222.6%22%20fill%3D%22%2322c55e%22/%3E%3C/svg%3E"
10
10
  }