Ilker ManapandClaude Opus 5.5 c522e8b2aa Refuse to open the agent port without TLS unless agent_insecure says so ...

Without agent_tls the control plane served plaintext h2c on every
interface, and any machine reaching it could register as any node. The
server now refuses to start that way unless agent_insecure: true, and then
binds loopback when agent_listen names only a port.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-04 09:51:37 +02:00

..

bootstrap

Release v0.10.4: CPU threads, tracing, and the rest of the review

2026-09-30 04:00:35 +02:00

examples

Refuse to open the agent port without TLS unless agent_insecure says so

2026-10-04 09:51:37 +02:00

ha

Set up a replicated store with server init --patroni, and watch it

2026-10-03 20:57:41 +02:00

mirror

Give the mirror a page, so managing it is not a curl command

2026-09-27 10:17:12 +02:00

monitoring

A btop-like monitor in the console, from Prometheus; node exporters discovered and installed

2026-10-04 01:51:05 +02:00

proxy

Serve the project's website at /about, with its fonts in the binary

2026-09-29 10:44:45 +02:00

systemd

Close what a second security review found still open

2026-09-30 02:25:07 +02:00