vault-cortex 0.10.5 → 0.10.7

package/dist/env.js

@@ -94,16 +94,31 @@ MEMORY_DIR=About Me
 # Host port to expose (default: 8000).
 PORT=8000
 
+# Client-IP trust for OAuth rate limiting and logs (defaults shown).
+# With nothing in front of the server, leave both untouched — each visitor
+# is identified by their own connection, and faked Forwarded/X-Forwarded-For
+# headers are ignored.
+# With a proxy or tunnel you control in front (Caddy, nginx, Cloudflare
+# Tunnel), set TRUST_PROXY_HOPS=1 so visitors are told apart by their real
+# IP — otherwise they all share one rate-limit budget.
+# Set TRUST_FORWARDED_HEADER=true only if the proxy reports each visitor's
+# IP in the RFC 7239 Forwarded header (e.g. AWS API Gateway).
+# TRUST_PROXY_HOPS=0
+# TRUST_FORWARDED_HEADER=false
+
 # Log verbosity: debug | info | warn | error (default: info).
 LOG_LEVEL=info
 
-# Directory for persistent log files inside the container.
-# Unset by default — logs go to stdout only. Set a path to also write
-# date-stamped log files there (the /data volume persists them).
-# LOG_DIR=/data/logs
+# Directory for persistent log files inside the container (default: none).
+# The container's own log (what \`docker logs\` shows) is always written, but
+# Docker discards it whenever the container is recreated — on image updates
+# or compose changes. Set a path (e.g. /data/logs) to also write date-stamped
+# log files there; the /data volume keeps them.
+LOG_DIR=none
 
-# Days to retain persistent log files before cleanup (default: 30).
-LOG_RETENTION_DAYS=30
+# Days to keep log files before cleanup on startup (default: 90). Only
+# applies once LOG_DIR is a path.
+# LOG_RETENTION_DAYS=90
 
 # Windows users: set this to true. Makes a vault stored on a C: drive work
 # through Docker Desktop (switches the file watcher to polling and note moves
@@ -206,15 +221,30 @@ MEMORY_DIR=About Me
 # Host port to expose (default: 8000).
 PORT=8000
 
+# Client-IP trust for OAuth rate limiting and logs (defaults shown).
+# With nothing in front of the server, leave both untouched — each visitor
+# is identified by their own connection, and faked Forwarded/X-Forwarded-For
+# headers are ignored.
+# With a proxy or tunnel you control in front (Caddy, nginx, Cloudflare
+# Tunnel), set TRUST_PROXY_HOPS=1 so visitors are told apart by their real
+# IP — otherwise they all share one rate-limit budget.
+# Set TRUST_FORWARDED_HEADER=true only if the proxy reports each visitor's
+# IP in the RFC 7239 Forwarded header (e.g. AWS API Gateway).
+# TRUST_PROXY_HOPS=0
+# TRUST_FORWARDED_HEADER=false
+
 # Log verbosity: debug | info | warn | error (default: info).
 LOG_LEVEL=info
 
 # Directory for persistent log files inside the container (default: /data/logs).
-# Set to empty to disable file logging (logs still go to stdout either way).
+# The container's own log (what \`docker logs\` shows) is always written, but
+# Docker discards it whenever the container is recreated — on image updates
+# or compose changes. Log files under LOG_DIR live on the data volume and
+# survive. Set to "none" to keep only the container log.
 LOG_DIR=/data/logs
 
-# Days to retain persistent log files before cleanup (default: 30).
-LOG_RETENTION_DAYS=30
+# Days to retain persistent log files before cleanup (default: 90).
+LOG_RETENTION_DAYS=90
 
 # User/group IDs for obsidian-sync (default: 1000).
 PUID=1000

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vault-cortex",
-  "version": "0.10.5",
+  "version": "0.10.7",
   "description": "Set up a Vault Cortex MCP server for your Obsidian vault in one command: npx vault-cortex@latest init",
   "license": "MIT",
   "type": "module",