mirror of
https://github.com/block/buzz.git
synced 2026-10-31 06:21:34 +00:00
781d39510c
The relay can use a configurable HTTP(S) gateway delivery URL and signs the same URL it sends. The gateway verifies NIP-98 against the received request URL, including authority, port, path and query. App Attest, scoped grants, replay checks and delivery quotas are unchanged. Forwarding proxies must preserve Host and supply the original request scheme through X-Forwarded-Proto. The NIP relay-delivery wording now defines the configured HTTP(S) URL as the signed URL and labels the public URL as an example. <!-- buzz-review-completed --> --------- Signed-off-by: Tom Brow <tomb@block.xyz>
20 lines
584 B
YAML
20 lines
584 B
YAML
# Required environment-owned values are deliberately invalid/empty here. A
|
|
# production renderer must inject all of them; CI proves omission fails.
|
|
image:
|
|
tag: ""
|
|
digest: ""
|
|
# Optional routing input, required only when httpRoute.enabled=true.
|
|
gatewayOrigin: ""
|
|
profiles:
|
|
dogfood:
|
|
appAttestAppId: ""
|
|
httpRoute:
|
|
# Keep disabled when the platform already routes the configured gateway
|
|
# origin to this Service. Gateway API users enable it and inject a parentRef.
|
|
enabled: false
|
|
parentRefs: []
|
|
networkPolicy:
|
|
apnsEgressCidrs:
|
|
- 0.0.0.0/0
|
|
postgresEgressCidrs: []
|