131868bdca
Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
63 lines
1.2 KiB
YAML
63 lines
1.2 KiB
YAML
project_name: nkeys
|
|
release:
|
|
github:
|
|
owner: nats-io
|
|
name: nkeys
|
|
name_template: '{{.Tag}}'
|
|
draft: true
|
|
builds:
|
|
- id: nk
|
|
main: ./nk/main.go
|
|
ldflags: "-X main.Version={{.Tag}}_{{.Commit}}"
|
|
binary: nk
|
|
goos:
|
|
- darwin
|
|
- linux
|
|
- windows
|
|
- freebsd
|
|
goarch:
|
|
- amd64
|
|
- arm
|
|
- arm64
|
|
- 386
|
|
- mips64le
|
|
- s390x
|
|
goarm:
|
|
- 6
|
|
- 7
|
|
ignore:
|
|
- goos: darwin
|
|
goarch: 386
|
|
- goos: freebsd
|
|
goarch: arm
|
|
- goos: freebsd
|
|
goarch: arm64
|
|
- goos: freebsd
|
|
goarch: 386
|
|
|
|
dist: build
|
|
|
|
archives:
|
|
- name_template: '{{ .ProjectName }}-v{{ .Version }}-{{ .Os }}-{{ .Arch }}{{ if .Arm
|
|
}}v{{ .Arm }}{{ end }}'
|
|
wrap_in_directory: true
|
|
format: zip
|
|
files:
|
|
- README.md
|
|
- LICENSE
|
|
|
|
checksum:
|
|
name_template: '{{ .ProjectName }}-v{{ .Version }}-checksums.txt'
|
|
|
|
snapshot:
|
|
name_template: 'dev'
|
|
|
|
nfpms:
|
|
- file_name_template: '{{ .ProjectName }}-v{{ .Version }}-{{ .Arch }}{{ if .Arm
|
|
}}v{{ .Arm }}{{ end }}'
|
|
maintainer: nats.io
|
|
description: NKeys utility cli program
|
|
vendor: nats-io
|
|
bindir: /usr/local/bin
|
|
formats:
|
|
- deb |