Skip to content

0.9

Compare
Choose a tag to compare
@IncognitoTGT IncognitoTGT released this 29 Jun 06:12

BREAKING CHANGES

  • Switch to AGPL
  • Auth0 env variables are now
    AUTH_AUTH0_ID=your-auth0-id
    AUTH_AUTH0_SECRET=your-auth0-secret
    AUTH_AUTH0_ISSUER=your-auth0-issuer
  • DOCKER_NETWORK env variable needs to be the name of a docker network
  • Use firewall rules for isolating containers instead of a dedicated docker network, for example iptables
    WARNING: FAILING TO ADD IPTABLES RULES TO PROTECT CONTAINERS COULD ALLOW ATTACKERS TO HIJACK ANY SESSION
    running
docker network create stardust;
  iptables -I FORWARD -s $(docker network inspect stardust | jq -r 'map(to_entries) | map ([.[6].value.Config[0].Subnet ]) | .[] | @tsv') -d $(docker network inspect stardust | jq -r 'map(to_entries) | map ([.[6].value.Config[0].Subnet ]) | .[] | @tsv') -j DROP

and then setting DOCKER_NETWORK to stardust should work.

What's changed

  • Multi domain support for OAuth, AUTH_URL env is no longer needed.
  • Assign defaults for docker related environment variables
  • Simplify some code

Pull Requests

  • fix: used wrong username by @uhidontkno in #15
  • chore(deps): bump ws from 8.17.0 to 8.17.1 by @dependabot in #17
  • chore(deps): bump braces from 3.0.2 to 3.0.3 by @dependabot in #18
  • BREAKING CHANGE - use iptables rules for preventing container-container communication by @IncognitoTGT in #19

New Contributors

Full Changelog: 0.8-rc...0.9