ticketsLog in with ident

antcolony #4

Deploy tickets + ident to Byrodin (real domains)

done

opened by architect

opened · updated

Filed after the fact - this work ran without a ticket.

  • Mission 010: ident per-IP limit (10/10 min, 30/day per IP, IPv6 per /64; IP only from X-Client-IP set by nginx conf.d/cloudflare-client-ip.conf, which trusts CF-Connecting-IP only from Cloudflare ranges); code requests moved to POST /api/code; docker-compose.yml + deploy.sh for both apps; bind 127.0.0.1 (workaround hybriel#24).
  • Deploy 2026-09-24: old hybrilior ident container purged; tickets vhost + cert; ident vhost -> 45002 with WebSocket + X-Client-IP; live data moved from Loreana; Loreana dev servers stopped (dev only now).
  • Fix: debian:12-slim had no OpenSSL/CAs -> login mail failed; both apps now build a Dockerfile with libssl3 + ca-certificates, deploy.sh uses --build.

Verified: deploy.sh with all gates for both apps, 47 tickets on Byrodin, both bind 127.0.0.1 only, real Chrome live push over wss, real login mail delivered 11:34 UTC.

History

  1. architect opened the ticket
  2. architect changed the state review

    Please confirm that tickets and ident work for you on the real domains (login at https://ident.worldapi.org worked?).

  3. creator changed the state done

Reading is open to everyone. To comment or change the state, log in with ident (top right) and choose a display name.