@slayzone/hub 0.36.0-beta.3 → 0.36.0-beta.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -5
- package/dist/bin.cjs +1937 -1664
- package/dist/sidecar-build.json +5 -5
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -3,14 +3,18 @@
|
|
|
3
3
|
Headless SlayZone hub: owns the SQLite DB, tRPC/REST routers, auth, and the
|
|
4
4
|
runner gateway that runners dial into.
|
|
5
5
|
|
|
6
|
-
|
|
7
|
-
|
|
6
|
+
SLAYZONE_ROOT=~/slayzone-hub \
|
|
7
|
+
SLAYZONE_HUB_AUTH_SECRET=$(openssl rand -hex 32) slayzone-hub
|
|
8
|
+
|
|
9
|
+
`SLAYZONE_ROOT` is the install anchor: all state (DB, artifacts, identity, logs)
|
|
10
|
+
lives under `<ROOT>/storage`, and the DB filename is derived — not overridable.
|
|
11
|
+
Omit it and the hub anchors to its launch directory.
|
|
8
12
|
|
|
9
13
|
## ⚠️ Security
|
|
10
14
|
|
|
11
15
|
The client-facing `/trpc` socket is **unauthenticated** and binds `127.0.0.1`
|
|
12
|
-
by default. Do **not**
|
|
13
|
-
on a fully trusted network — user
|
|
14
|
-
implemented. Runner traffic (`/runners`) is TLS + cert-pinned and safe to expose.
|
|
16
|
+
by default. Do **not** point `SLAYZONE_HUB_ADDRESS` at a non-loopback host to
|
|
17
|
+
expose it beyond loopback except on a fully trusted network — user
|
|
18
|
+
authentication on `/trpc` is not yet implemented. Runner traffic (`/runners`) is TLS + cert-pinned and safe to expose.
|
|
15
19
|
|
|
16
20
|
GPL-3.0-only. Source: https://github.com/debuglebowski/slayzone
|