@slayzone/hub 0.36.0-beta.2 → 0.36.0-beta.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -1,16 +1,20 @@
1
1
  # @slayzone/hub (SlayZone hub)
2
2
 
3
3
  Headless SlayZone hub: owns the SQLite DB, tRPC/REST routers, auth, and the
4
- fleet gateway that runners dial into.
4
+ runner gateway that runners dial into.
5
5
 
6
- SLAYZONE_FLEET_MODE=1 SLAYZONE_DB_PATH=~/.slayzone/hub.sqlite \
7
- SLAYZONE_FLEET_SECRET=$(openssl rand -hex 32) slayzone-hub
6
+ SLAYZONE_ROOT=~/slayzone-hub \
7
+ SLAYZONE_HUB_AUTH_SECRET=$(openssl rand -hex 32) slayzone-hub
8
+
9
+ `SLAYZONE_ROOT` is the install anchor: all state (DB, artifacts, identity, logs)
10
+ lives under `<ROOT>/storage`, and the DB filename is derived — not overridable.
11
+ Omit it and the hub anchors to its launch directory.
8
12
 
9
13
  ## ⚠️ Security
10
14
 
11
15
  The client-facing `/trpc` socket is **unauthenticated** and binds `127.0.0.1`
12
- by default. Do **not** set `SLAYZONE_HOST` to expose it beyond loopback except
13
- on a fully trusted network — user authentication on `/trpc` is not yet
14
- implemented. Runner traffic (`/fleet`) is TLS + cert-pinned and safe to expose.
16
+ by default. Do **not** point `SLAYZONE_HUB_ADDRESS` at a non-loopback host to
17
+ expose it beyond loopback except on a fully trusted network — user
18
+ authentication on `/trpc` is not yet implemented. Runner traffic (`/runners`) is TLS + cert-pinned and safe to expose.
15
19
 
16
- GPL-3.0-only. Source: https://github.com/JCB-K/SlayZone
20
+ GPL-3.0-only. Source: https://github.com/debuglebowski/slayzone