• 0 posts
  • 8 comments
Joined 1 year ago
Cake day: May 22nd, 2025
    1. Fixed credential-exfiltration risk in /api/proxy/image: Previously the endpoint could:
    • accept arbitrary auth_id
    • load stored API keys
    • forward them to attacker-controlled URLs
    1. Enforced outbound host allowlist globally Previously:
    • allowlist existed
    • but outgoingFetch() didn’t enforce it
    • plugins/engines could bypass it
    1. Fixed extension store path traversal Previously a malicious store manifest could:
    • inject … paths
    • escape install directories
    • reference arbitrary files
    1. Hardened proxy IP trust Previously:
    • rate limiting trusted any X-Forwarded-For header
    • clients could spoof their IP
    1. Fixed inconsistent settings authentication Previously:
    • settings UI stored an auth token
    • but the settings modal didn’t send it when saving
    1. Implemented Improved proxy deployment support
    • Added proxy-aware behavior:
    • DEGOOG_PUBLIC_BASE_URL for canonical URLs
    • secure cookie handling when X-Forwarded-Proto=https

    Additional Improvements:

    • suggestion fetching hardened
    • DuckDuckGo suggestion parsing fixed
    • unified outbound request handling
    • install state guard properly cleaned up

    Made some other changes for my specific deployment. Very happy with your work so far. Thanks so much

  • Well I’ve done most of those except for using an immutable distro, and quite honestly have zero interest in running one.

    Just this past year I’ve setup a media server using a bunch of servers I nabbed from work, did unraid because I’ve been toying with the unraid idea for years. Learned and fell in love with Docker. I avoided it like the plague for the better part of a decade. Now I run damn near everything in docker containers. Started using home assistant quite recently actually, my wife got annoyed with the heavily sanitized results she was getting with Gemini for Google Home. So I setup M5Stack ATOM Lite ESP32’s around the house acting as microphones that I then use with home assistant to ferry the query to the Anthropic API and the result to the nearest Google Home device. It’s a work in progress, but happy with the results