Releases · spaceness/stardust

29 Jun 06:12

IncognitoTGT

0.9

f447809

0.9 Latest

Latest

BREAKING CHANGES

Switch to AGPL

Auth0 env variables are now

AUTH_AUTH0_ID=your-auth0-id
AUTH_AUTH0_SECRET=your-auth0-secret
AUTH_AUTH0_ISSUER=your-auth0-issuer

DOCKER_NETWORK env variable needs to be the name of a docker network
Use firewall rules for isolating containers instead of a dedicated docker network, for example iptables
WARNING: FAILING TO ADD IPTABLES RULES TO PROTECT CONTAINERS COULD ALLOW ATTACKERS TO HIJACK ANY SESSION
running

docker network create stardust;
  iptables -I FORWARD -s $(docker network inspect stardust | jq -r 'map(to_entries) | map ([.[6].value.Config[0].Subnet ]) | .[] | @tsv') -d $(docker network inspect stardust | jq -r 'map(to_entries) | map ([.[6].value.Config[0].Subnet ]) | .[] | @tsv') -j DROP

and then setting DOCKER_NETWORK to stardust should work.

What's changed

Multi domain support for OAuth, AUTH_URL env is no longer needed.
Assign defaults for docker related environment variables
Simplify some code

Pull Requests

fix: used wrong username by @uhidontkno in #15
chore(deps): bump ws from 8.17.0 to 8.17.1 by @dependabot in #17
chore(deps): bump braces from 3.0.2 to 3.0.3 by @dependabot in #18
BREAKING CHANGE - use iptables rules for preventing container-container communication by @IncognitoTGT in #19