Sekai/hado
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: trust X-Remote-User only from the proxy (HADO_TRUSTED_PROXIES); open tailnet inbound for the agent

Browse Source 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BCrwHHnGCB5XH968Nxokqw
This commit is contained in:
nikita.hohlov
2026-09-05 07:25:31 -03:00
parent 36d6af659e
commit bc82bbab19
5 changed files with 40 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
core/.env.example
View File

@@ -43,6 +43,8 @@ CACHE_STORE=database
HADO_DEFAULT_TZ=America/Montevideo
# Только dev (APP_ENV=local): логин вместо X-Remote-User, чтобы открыть инбокс без хаба
HADO_DEV_USER=
# Откуда верим X-Remote-User (TCP-сосед): loopback и докер-мосты, т.е. Caddy. С тейлнета заголовок не принимается.
HADO_TRUSTED_PROXIES=127.0.0.0/8,172.16.0.0/12
HADO_PRESENCE_TIMEOUT=2
HADO_FALLBACK_DAY=30
HADO_FALLBACK_HOUR=10