code/cl8y-wallet-security
Watch
4
0
Fork
You've already forked cl8y-wallet-security
 0
Code Issues 6 Pull requests 1 Projects Releases Packages 3 Wiki Activity

Bound gateway inventory reads and verify actual runtime limits #12

Merged
PlasticDigits merged 1 commit from bb/portal-mail-gateway-thr_ywz2dcyd3p into main 2026-10-31 04:17:46 +00:00
Conversation 0 Commits 1 Files changed 3 +12 -6
PlasticDigits commented 2026-10-31 04:15:00 +00:00
Owner

The first separate-gateway creation attempt stopped before POST because Coolify's existing application inventory exceeded the 4 MiB response bound. Raise the finite in-memory cap to 8 MiB, retaining closed outputs and credential scope, and verify actual runtime memory, CPU, PID and no-new-privileges settings in the gateway receipt.

Independent review cleared exact c28a8b3ccb7210583e91844a06cc4e71e3ae6415 for separate gateway creation and unauthenticated owned preflight only. Reviewer independently passed six provisioner mocks, shell syntax, and the exact response bound (8,000,000 accepted / 8,000,001 rejected before JSON). Relay/image are unchanged from PR #10.

No main-portal settings, worker attachments, SMTP AUTH, sender enablement or sends are included. Runtime TLS/network/source-IP and delivery acceptance stay open under issue #3.

The first separate-gateway creation attempt stopped before POST because Coolify's existing application inventory exceeded the 4 MiB response bound. Raise the finite in-memory cap to 8 MiB, retaining closed outputs and credential scope, and verify actual runtime memory, CPU, PID and no-new-privileges settings in the gateway receipt. Independent review cleared exact `c28a8b3ccb7210583e91844a06cc4e71e3ae6415` for separate gateway creation and unauthenticated owned preflight only. Reviewer independently passed six provisioner mocks, shell syntax, and the exact response bound (8,000,000 accepted / 8,000,001 rejected before JSON). Relay/image are unchanged from PR #10. No main-portal settings, worker attachments, SMTP AUTH, sender enablement or sends are included. Runtime TLS/network/source-IP and delivery acceptance stay open under issue #3.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
code/cl8y-wallet-security!12
No description provided.