Dcntrlized/KeepNote
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

build(auth): bump dcntrlized-auth to v0.1.5 (DCNTRLIZED_DEBUG flag)

Browse Source 
Renames the server-side plaintext escape hatch from INSECURE_INTERNAL to
DCNTRLIZED_DEBUG in the debug compose and the listener log line; bumps the
shared auth module.
This commit is contained in:
Admin
2026-08-16 17:16:37 +01:00
parent 75d262335c
commit 8c37e54dbb
4 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker-compose.debug.yaml
+1 -1
View File
@@ -50,7 +50,7 @@ services:
# Security theme M2 §2: keep THIS listener plaintext so the RN client
# (direct mode) and hot reload work without certs. The auth proxy edge
# is still mTLS (mounted identity above).
- INSECURE_INTERNAL=1
- DCNTRLIZED_DEBUG=true
# Application configuration
# - PORT=8080
# - ENVIRONMENT=development
src/go.mod
+1 -1
View File
@@ -3,7 +3,7 @@ module git.dcntrlized.org/Dcntrlized/KeepNote
go 1.26.5
require (
git.dcntrlized.org/dcntrlized/dcntrlized-auth v0.1.4
git.dcntrlized.org/dcntrlized/dcntrlized-auth v0.1.5
github.com/google/uuid v1.6.0
github.com/jackc/pgx/v5 v5.10.0
)
src/go.sum
+2 -2
View File
@@ -1,5 +1,5 @@
git.dcntrlized.org/dcntrlized/dcntrlized-auth v0.1.4 h1:QuD5/CaKqw+Ot2dr+7BYfxfw3shxhizDg5UtGIGutVc=
git.dcntrlized.org/dcntrlized/dcntrlized-auth v0.1.4/go.mod h1:BCGcoKSC+yVLRDnYZGUCBcrgu7NaFWdA39PdGG1+oNM=
git.dcntrlized.org/dcntrlized/dcntrlized-auth v0.1.5 h1:T2To6w6+8J+PlvresQawoqVUiKZWSLG0FtRLuTS/4L4=
git.dcntrlized.org/dcntrlized/dcntrlized-auth v0.1.5/go.mod h1:BCGcoKSC+yVLRDnYZGUCBcrgu7NaFWdA39PdGG1+oNM=
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
src/main.go
+2 -2
View File
@@ -76,14 +76,14 @@ func main() {
// Security theme M2 §2: the service's listener requires a CA-issued client
// cert (Maestro's identity) so only Maestro can drive actions (T4) and the
// peer edge is encrypted. INSECURE_INTERNAL=1 keeps the dev fleet plaintext.
// peer edge is encrypted. DCNTRLIZED_DEBUG=true keeps the debug fleet plaintext.
tlsCfg, err := tlsutil.ServerConfig()
if err != nil {
logger.Error("TLS setup failed: %v", err)
os.Exit(1)
}
if tlsCfg == nil {
logger.Info("KeepNote listening plaintext on :8080 (INSECURE_INTERNAL dev mode)")
logger.Info("KeepNote listening plaintext on :8080 (DCNTRLIZED_DEBUG dev mode)")
if err := http.ListenAndServe(":8080", handler); err != nil {
logger.Error("HTTP server failed: %v", err)
os.Exit(1)