smueller/HexaHost-GameCloud

Files

TheOnlyMace 50cd4b3ffd

CI / Node — lint, typecheck, test, build (push) Failing after 12s

Details

CI / Go — node-agent tests (push) Failing after 9s

Details

CI / Go — edge-gateway build (push) Successful in 17s

Details

Enhance API with OIDC support, including login and callback endpoints. Update environment variables for OIDC configuration in .env.example. Add new features to the catalog service for listing software families, Minecraft versions, and deployment regions. Implement server management actions such as kill, delete, and update in the servers module. Integrate feature flags for maintenance mode in server operations. Update pnpm-lock.yaml with new dependencies and versions.

2026-07-05 18:39:53 +02:00

414 B

Raw Blame History

Container Hardening

The node-agent applies baseline Docker hardening:

cap_drop: ALL with minimal adds
security_opt: no-new-privileges
PID limits and log rotation

Roadmap (Post-MVP)

Seccomp — Custom profile per software family under deploy/seccomp/
AppArmor — Node-level profiles for game server containers

See apps/node-agent/internal/docker/client.go for current defaults.