oxmc
685c14ba97
Node.js daemon: Ed25519 identity + self-signed TLS, signed registration/ renewal with the central registry, mDNS advertising, disk-backed fetch-through asset cache with an origin allowlist. Includes a local dev-registry stand-in for the real oxmc.me endpoints and an end-to-end smoke test (register -> token -> cache miss/hit -> SSRF rejection). See README.md for the full protocol and trust model.
15 lines
399 B
YAML
15 lines
399 B
YAML
# Copy to /etc/pawletcache/config.yml and fill in enrollmentToken + hostname.
|
|
|
|
hostname: cache.local.lan # must resolve/be reachable on the LAN
|
|
listenAddr: "0.0.0.0"
|
|
listenPort: 8443
|
|
|
|
storageDir: /var/lib/pawletcache/assets
|
|
identityDir: /var/lib/pawletcache/identity
|
|
|
|
centralUrl: https://oxmc.me
|
|
enrollmentToken: "REPLACE_ME" # issued out-of-band per deployment
|
|
|
|
allowedOrigins:
|
|
- oxmc.me
|