Admin 73c09132b3 M2 §2: require a CA-issued client cert on the HTTP listener (mTLS)
Serve the listener over TLS with ClientAuth=RequireAndVerifyClientCert
trusting the instance CA (shared tlsutil.ServerConfig): only Maestro can
drive actions (T4), and the peer edge is encrypted. INSECURE_INTERNAL=1
(dev debug compose) keeps the listener plaintext for the RN client's
direct mode and hot reload.
2026-08-16 01:14:06 +01:00
S
Description
No description provided
163 KiB
Languages
TypeScript 43.9%
Go 37.5%
CSS 6%
HTML 4.9%
Shell 3.3%
Other 4.4%