mirror of
https://github.com/block/buzz.git
synced 2026-10-30 22:11:36 +00:00
8471049c43
## Summary - Supersedes #1913 with a KLIPY-hosted URL implementation. - Adds KLIPY GIF search and trending results to desktop message and forum composers. - Keeps selected GIFs hosted by KLIPY; Buzz stores only the external URL and media metadata (no imeta tag, since relays only accept hash-backed local `/media/` entries). - Aligns the Emoji/GIF picker with Buzz's standard segmented control, theme surfaces, and motion behavior. ## Relay-to-provider boundary - The relay proxies KLIPY search/share so the `BUZZ_KLIPY_API_KEY` never reaches the desktop; the key stays server-side behind a redacted `Debug` impl. - The dedicated GIF `reqwest` client sets `redirect::Policy::none()`. Because the API key rides in the request path, following a provider `3xx` could replay a key-bearing URL to an attacker-chosen host (an SSRF/key-disclosure primitive). With redirects disabled, a `3xx` returns as a non-success status that the handlers map to a generic `502`; the `Location` target is never read or forwarded. - Admission reuses the established NIP-98, membership, replay, and per-pubkey rate-limit gates, with an upstream response-size cap and allowlisting so KLIPY error bodies never cross the relay boundary. ## Accessibility - Under `prefers-reduced-motion: reduce`, the picker grid renders a static provider poster (a normalized `jpg` asset) instead of the animated preview, or a named static placeholder when no poster is available. It reacts to preference changes while mounted. `no-preference` keeps the animated preview. - Selected GIFs carry their title through `ImetaMedia`'s `displayLabel`, so the composer thumbnail, preview dialog, editor, lightbox, and remove control all derive one non-empty accessible name instead of an empty `Attachment ` label. Ordinary hashed uploads keep their existing hash-derived names. --------- Signed-off-by: kenny lopez <klopez4212@gmail.com> Signed-off-by: Kenny Lopez <klopez4212@gmail.com> Signed-off-by: Will Pfleger <pfleger.will@gmail.com> Signed-off-by: Duncan <dcfd242e557282d7a1e2cf2e6877522682f1e5c6156dc92ca7d90eaedd3b0f95@buzz.block.builderlab.xyz> Signed-off-by: Hayt <9e1c23a3fd83f61da34420e4e88ff1b16e45cafcc0cd9019eb07d4ecfa8ca9b0@buzz.block.builderlab.xyz> Co-authored-by: Princess Donut <b238ea756dee4d98afa5883fc7f1de61eeabe65bf700e3a5a5a80db5e42e2c2b@buzz.block.builderlab.xyz> Co-authored-by: Duncan <dcfd242e557282d7a1e2cf2e6877522682f1e5c6156dc92ca7d90eaedd3b0f95@buzz.block.builderlab.xyz> Co-authored-by: Will Pfleger <pfleger.will@gmail.com> Co-authored-by: Hayt <9e1c23a3fd83f61da34420e4e88ff1b16e45cafcc0cd9019eb07d4ecfa8ca9b0@buzz.block.builderlab.xyz>
30 lines
1.3 KiB
YAML
30 lines
1.3 KiB
YAML
# Sample Secret matching `secrets.existingSecret: buzz-secrets`.
|
|
#
|
|
# Manage this via SealedSecrets / SOPS / External Secrets / Vault — anything
|
|
# that keeps the unencrypted form out of git. The chart reads keys it finds
|
|
# and leaves the rest as Pod env vars marked `optional: true`.
|
|
#
|
|
# Keys consumed by the relay (all optional unless required by relay config):
|
|
# BUZZ_RELAY_PRIVATE_KEY — 64-char hex; relay identity (do NOT rotate)
|
|
# BUZZ_GIT_HOOK_HMAC_SECRET — 32+ chars; required when replicaCount > 1
|
|
# DATABASE_URL — postgres://...
|
|
# READ_DATABASE_URL — postgres://... (optional read-replica; omit to disable read routing)
|
|
# REDIS_URL — redis://... (required when replicaCount > 1)
|
|
# BUZZ_S3_ACCESS_KEY
|
|
# BUZZ_S3_SECRET_KEY
|
|
# BUZZ_KLIPY_API_KEY — omit to disable relay-proxied GIF search
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: buzz-secrets
|
|
namespace: buzz
|
|
type: Opaque
|
|
stringData:
|
|
BUZZ_RELAY_PRIVATE_KEY: "REPLACE_WITH_64_HEX"
|
|
BUZZ_GIT_HOOK_HMAC_SECRET: "REPLACE_WITH_RANDOM_64_CHARS"
|
|
DATABASE_URL: "postgres://buzz:REPLACE@postgres.buzz.svc.cluster.local:5432/buzz?sslmode=require"
|
|
REDIS_URL: "redis://:REPLACE@redis.buzz.svc.cluster.local:6379"
|
|
BUZZ_S3_ACCESS_KEY: "REPLACE"
|
|
BUZZ_S3_SECRET_KEY: "REPLACE"
|
|
BUZZ_KLIPY_API_KEY: "REPLACE"
|