8 Commits

Include renames

Author	SHA1	Message	Date
openhands	597287fce5	fix(compose): keep the CMS opt-in so it cannot claim the CI port ... On a CI-managed host scripts/ci-deploy.sh owns port 3002 through the blue/green slots, so a compose replica of the cms service could only ever crash-loop on EADDRINUSE — it never serves traffic, because nginx points at a slot container. Gate the service behind the `cms` profile so a bare `docker compose up -d` starts only byparr. Naming the service explicitly (`docker compose up -d cms`, which is what the installer and updater already do) still enables the profile automatically, so the compose-only install path keeps working. Keep the one port that is actually served (3002) and make the 2 GB ceiling hard by capping swap at 2g as well. Drop the green compose service (3003): the green slot only ever exists as a docker run container created by CI, so compose no longer defines it and the two paths cannot drift apart. The loopback override contract stays covered: proxy-config.test.mjs now renders the configuration with --profile cms, and a new build-contract test pins the profile and the memory limits so neither can be dropped by accident.	2026-10-19 19:00:07 +02:00
openhands	f99980052b	perf: optimize cache layer for speed and stability ... - Remove random TTL jitter to prevent unpredictable cache drops - Add deterministic LRU eviction with proper entry cleanup - Improve cache deduplication to prevent duplicate computations - Skip Redis I/O during tests for faster, more stable execution - Optimize depth calculation in catalog tree nodes - Maintain backward compatibility and full test coverage (3331 passed)	2026-10-02 17:16:03 +02:00
openhands	7392b843ad	fix(security): LAPI-only engine boot, import via stdin, correct compose service	2026-09-24 18:59:13 +02:00
openhands	9562a75378	feat(security): external IP blocklist sync for the local CrowdSec engine	2026-09-24 18:39:38 +02:00
openhands	84d53139a9	feat(security): opt-in local CrowdSec LAPI bouncer on the Docker engine	2026-09-24 18:08:18 +02:00
Simo	9a2d73a6f6	feat(docker): provide verified-header proxy profiles for self-hosted clones	2026-09-13 20:15:10 +02:00
Simo	8abfe352ef	fix(security): authorize site uploads and harden tokens, media and request identity	2026-09-13 19:24:43 +02:00
Simo	8f55ff2d17	feat(docker): guide clone installation and validate paired update artifacts	2026-09-13 17:57:14 +02:00