fix(security): enforce mandatory HUB_SECRET, loopback-only 127.0.0.1 binding, cookie Path rewriting per universe

2026-08-19 21:47:15 +01:00
parent b61f1804b9
commit 4923aa380e
5 changed files with 75 additions and 28 deletions
@@ -1,7 +1,8 @@
 # Hermes Hub Environment Configuration
 TZ=Africa/Tunis
-HUB_PORT=8080
-HUB_SECRET=change-this-secret-2026
+
+# Master Secret (OBLIGATOIRE — generer avec: openssl rand -hex 32)
+HUB_SECRET=

 # Tailscale Endpoints
 NAS_TAILSCALE_IP=100.86.197.88