admin
6db08a5eb3
gates / gates (push) Successful in 1s
update_ladder: in .felhom.yml, one JSON entry per line (spiked live on controller v0.266.0 and v0.267.0 first). Two gates: check-test-record.py (static, CI too) and check-test-record-move.py (history + registry for moved refs only). 16 decoys, 3 red-proofs. The ONLY writer is upgrade-test.py --write-ladder (bench AND box proven, digests resolved). Harness v3: box fixtures on the bench, files_may_change. Backfill: the 21 moves of 2026-09-22, 21 proven from their records. No image: line moved. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
99 lines
4.0 KiB
YAML
99 lines
4.0 KiB
YAML
# =============================================================================
|
|
# .felhom.yml - App metadata for felhom-controller
|
|
# =============================================================================
|
|
|
|
# --- Display info (shown on dashboard) ---
|
|
display_name: "PrivateBin"
|
|
description: "Titkosított jegyzet és szöveg megosztás"
|
|
category: "security"
|
|
subdomain: "paste"
|
|
slug: "privatebin"
|
|
# catalog_since: the date THIS repo last changed this app's pinned images. Any commit that
|
|
# changes an image: line must set this to the same day (see CLAUDE.md).
|
|
catalog_since: "2026-09-22"
|
|
|
|
# --- Resource hints (displayed on deploy screen) ---
|
|
resources:
|
|
mem_request: "30M"
|
|
mem_limit: "128M"
|
|
pi_compatible: true
|
|
needs_hdd: false
|
|
|
|
# --- Deploy fields (first deployment only) ---
|
|
deploy_fields:
|
|
- env_var: DOMAIN
|
|
label: "Domain"
|
|
type: domain
|
|
description: "A szerver domain neve"
|
|
locked_after_deploy: true
|
|
|
|
- env_var: SUBDOMAIN
|
|
label: "Aldomain"
|
|
type: subdomain
|
|
default: "paste"
|
|
required: true
|
|
locked_after_deploy: true
|
|
description: "Az alkalmazás aldomainje"
|
|
|
|
# --- App info (info page content) ---
|
|
app_info:
|
|
tagline: "Titkosított szöveg megosztás - a szerver nem látja a tartalmat"
|
|
docs_url: "https://github.com/PrivateBin/PrivateBin/wiki"
|
|
|
|
use_cases:
|
|
- 'Érzékeny szövegek biztonságos megosztása'
|
|
- 'E2E titkosítás - a szerver nem fér hozzá a tartalomhoz'
|
|
- 'Beállítható lejárati idő (5 perc - 1 év, vagy soha)'
|
|
- 'Olvasás után automatikus törlés opció'
|
|
- 'Jelszóvédelem a még nagyobb biztonságért'
|
|
|
|
first_steps:
|
|
- 'Nyisd meg a paste.DOMAIN címet a böngészőben'
|
|
- 'Írd be a szöveget és kattints a Küldés gombra'
|
|
- 'Oszd meg a generált linket - a titkosítási kulcs az URL-ben van'
|
|
|
|
|
|
# --- Controller-side health probe ---
|
|
healthcheck:
|
|
checks:
|
|
- type: http
|
|
port: 8080
|
|
|
|
# --- English copy (localisation slice 5, R-560) --------------------------------------------
|
|
# The Hungarian above is UNCHANGED and is what a Hungarian household reads. A box on English
|
|
# reads this block field by field; a field missing here shows the Hungarian one, and a
|
|
# controller older than 0.257.0 ignores the whole block.
|
|
i18n:
|
|
en:
|
|
description: "Encrypted note and text sharing"
|
|
|
|
app_info:
|
|
tagline: "Encrypted text sharing - the server never sees the content"
|
|
|
|
use_cases:
|
|
- 'Share sensitive text safely'
|
|
- 'End-to-end encryption - the server cannot reach the content'
|
|
- 'You choose how long it lasts (5 minutes to 1 year, or never)'
|
|
- 'Optional: delete it automatically after it is read'
|
|
- 'Password protection for extra safety'
|
|
|
|
first_steps:
|
|
- 'Open paste.DOMAIN in your browser'
|
|
- 'Type your text and select Send'
|
|
- 'Share the link you get - the encryption key is part of the URL'
|
|
|
|
deploy_fields:
|
|
- env_var: DOMAIN
|
|
label: "Domain"
|
|
description: "The server domain name"
|
|
|
|
- env_var: SUBDOMAIN
|
|
label: "Subdomain"
|
|
description: "The subdomain this app answers on"
|
|
|
|
# update_ladder — the test record: one tested step per line, oldest first (JSON flow mappings,
|
|
# `09-update-architecture.md` §6.4 part 4). WRITTEN BY scripts/upgrade-test.py, never by hand;
|
|
# gated by scripts/check-test-record.py. An image: move without a proven entry here is refused.
|
|
update_ladder:
|
|
- {"from": {"privatebin": "privatebin/pdo:2.0.5"}, "to": {"privatebin": "privatebin/pdo:2.0.6"}, "digest": {"privatebin": "sha256:4c141b2326f8b353598ce9ce7507a9cfecf2dad5c60a39fea903d430e296d8f5"}, "verdict": "proven", "tested_at": "2026-09-21T18:19:14.044130+00:00", "harness_version": 1, "evidence": "felhom.eu/documentation/audits/update-night-2026-09-21/apps/privatebin/verdict.json", "memory_peak_pct": null, "marks": {"files_may_change": false, "needs_person": null, "memory_tight": false}, "backfilled": "2026-09-23", "note": "backfilled from catalog commit f547f16; box walk only (harness v1, no memory watch); digest = what the registry served on 2026-09-23, not a measurement of the tested image"}
|