@opsimathically/nodenetproccalld 0.0.2 → 0.0.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opsimathically/nodenetproccalld",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "Standalone TypeScript daemon that wraps @opsimathically/networkprocedurecall capabilities.",
   "main": "dist/index.js",
   "module": "dist/index.mjs",

package/config/api_keys.config.json5

@@ -1,21 +0,0 @@
-{
-  // API keys and privilege grants for auth_callback.
-  api_keys: [
-    {
-      key_id: 'admin_key_1',
-      api_key: 'replace_me_with_random_secret',
-      privileges: ['all_privileges'],
-      enabled: true,
-      identity_constraints: {
-        // Example: accept loopback clients only.
-        remote_address_regex: '^(127\\.0\\.0\\.1|::1|::ffff:127\\.0\\.0\\.1)$'
-      }
-    },
-    {
-      key_id: 'invoke_only_key_1',
-      api_key: 'replace_me_with_second_secret',
-      privileges: ['invoke_functions'],
-      enabled: false
-    }
-  ]
-}

package/config/server.config.json5

@@ -1,79 +0,0 @@
-{
-  // Friendly name that clients can use in their own config maps.
-  information: {
-    server_name: 'daemon_server_1'
-  },
-
-  // Bind target for tls.createServer.
-  network: {
-    bind_addr: '0.0.0.0',
-    tcp_listen_port: 6767
-  },
-
-  // PEM files are resolved relative to this config file unless absolute paths are used.
-  tls_mtls: {
-    key_file: './certs/server.key.pem',
-    cert_file: './certs/server.cert.pem',
-    ca_file: './certs/ca.cert.pem',
-    // crl_file: './certs/ca.crl.pem',
-    min_version: 'TLSv1.3',
-    handshake_timeout_ms: 5000,
-    request_timeout_ms: 15000,
-    max_frame_bytes: 1048576
-  },
-
-  workerprocedurecall: {
-    count: 4,
-    constructor_options: {
-      call_timeout_ms: 30000,
-      control_timeout_ms: 10000,
-      restart_on_failure: true,
-      max_restarts_per_worker: 6,
-      max_pending_calls_per_worker: 500
-    },
-    start_options: {
-      restart_base_delay_ms: 150,
-      restart_max_delay_ms: 5000,
-      restart_jitter_ms: 250
-    }
-  },
-
-  // Optional abuse controls from @opsimathically/networkprocedurecall.
-  abuse_controls: {
-    connection_controls: {
-      max_concurrent_sockets: 1024,
-      max_concurrent_handshakes: 256,
-      max_unauthenticated_sessions: 256,
-      per_ip_max_new_connections_per_window: 64,
-      tls_handshake_timeout_ms: 5000,
-      auth_message_timeout_ms: 5000
-    },
-    request_controls: {
-      max_in_flight_requests_per_connection: 128,
-      per_connection: {
-        enabled: true,
-        tokens_per_interval: 200,
-        interval_ms: 1000,
-        burst_tokens: 400
-      },
-      per_api_key: {
-        enabled: true,
-        tokens_per_interval: 1000,
-        interval_ms: 1000,
-        burst_tokens: 2000
-      },
-      per_ip: {
-        enabled: true,
-        tokens_per_interval: 500,
-        interval_ms: 1000,
-        burst_tokens: 1000
-      }
-    }
-  },
-
-  observability: {
-    enable_console_log: true,
-    log_worker_events: true,
-    metrics_log_interval_ms: 30000
-  }
-}