orc-ai 0.1.22 → 0.1.23
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md
CHANGED
|
@@ -129,11 +129,15 @@ Run ORC in a container with the published image:
|
|
|
129
129
|
docker run -d --name orc \
|
|
130
130
|
-p 7700:7700 \
|
|
131
131
|
-v orc-data:/data \
|
|
132
|
-
-e ORC_API_SECRET
|
|
132
|
+
-e ORC_API_SECRET=$(openssl rand -hex 32) \
|
|
133
133
|
-e ANTHROPIC_API_KEY=$ANTHROPIC_API_KEY \
|
|
134
134
|
niradler/orc:latest
|
|
135
135
|
```
|
|
136
136
|
|
|
137
|
+
> The container binds `0.0.0.0`. Set a strong `ORC_API_SECRET` before exposing the
|
|
138
|
+
> mapped port beyond localhost — without it, every endpoint (including job execution,
|
|
139
|
+
> which runs arbitrary shell commands) is open to anyone who can reach the port.
|
|
140
|
+
|
|
137
141
|
Or with [docker-compose.yml](docker-compose.yml):
|
|
138
142
|
|
|
139
143
|
```bash
|