Commits

main · .env.example

Hosting prices: DigitalOcean and Hetzner with the owner's read-only tokens (host.data_sources) (#308)OpenVibers · 6 days ago f27925b
D11 owner settings: host.inference_planner (#284)OpenVibers · 8 days ago 1ff0d00
Host: the console — your servers on every provider in one place (Linode, DigitalOcean, Vultr, Hetzner Cloud with your own sealed tokens): status, prices, totals, power actions and the catalog's cheaper equivalent; account export and deletion (#120)OpenVibers · 25 days ago 1ea7a42
Host: tell search engines about new and repriced catalog pages (IndexNow) (#109)OpenVibers · 29 days ago 0195ccb
Host: the static hosting engine moved to OpenVibe.Space; its URLs answer 410 with a link (#84)OpenVibers · 12 Oct 2026 e9b9120
Host: "Tell me when this price changes" on every plan page (a prefilled OpenVibe.Watch watch) (#83)OpenVibers · 12 Oct 2026 50037b0
Host: discussion threads on every provider and plan page (OpenVibe.Community) (#74)OpenVibers · 11 Oct 2026 1fde068
Host: openvibe.host is hosting compared (the sourced hosting catalog, now the front page) (#69)OpenVibers · 11 Oct 2026 ab1de18
Host: delete the migration era (SQLite worker, backup/drill/probe branches, data switch, legacy deploy fallback) (#55)OpenVibers · 10 Oct 2026 f95e9d6
Host: public hosting waits for its launch switch (HOST_PUBLIC_HOSTING, off): staff-only projects and an honest front page until then (#47)OpenVibers · 10 Oct 2026 873a5f0
Store tenant objects in OpenVibe.Media with local disk as the read cache (HOST_OBJECT_STORE=media; off by default) (#24)OpenVibers · 6 Oct 2026 5c5cba0
Host Stage B moves to PostgreSQL and Valkey (ADR-035, roadmap WS-X2, repository-pass group G2), async from end to end.OpenVibers · 28 Sept 2026 03d70e1
Per-actor limits on the dashboard's and the API's writes (roadmap WS-R task 4; openvibe-sdk 0.11.0 -> 0.12.0 openvibe-sdk/limits). server/http/actor-limits.js runs after the viewer is resolved and counts a signed-in person by subject, or a service by its principal (a service here manages its own projects): HOST_LIMITS_MINUTE / _HOUR (120 and 3000), and tighter on top for deploy uploads (10 a minute, 100 an hour: stored and unpacked), domain verification (10/100: DNS lookups) and new projects (5/30). Past a limit: 429 rate_limited with Retry-After before the route runs, logged and counted in host_rate_limited_total. Anonymous callers and reads keep the per-address limits. HOST_ACTOR_LIMITS=off is a rollback lever; the Stage B suites, which deploy dozens of times a minute as one person, boot with it off. test/actor-limits.test.js covers the limits themselves. npm test 38/38.OpenVibers · 28 Sept 2026 2b63389
Stage B abuse limits from the threat review: deploys stop before the shared disk fills, one person owns at most 10 projects, a takedown clears what the site left in visitors' browsersOpenVibers · 23 Sept 2026 0ff29d5
Stage B launch readiness: staff takedowns, bounded uploads, no CA validation files, realip-only nginx headers, a launch that removes the pending vhost in the same changeOpenVibers · 23 Sept 2026 1e48cb2
Refuse FedCM ID assertions as user tokens; cap archive unpacking at HOST_MAX_UNPACKED_BYTESOpenVibers · 23 Sept 2026 3d7375b
Stage B tenant static hosting: the Host API service on port 4910OpenVibers · 23 Sept 2026 cf7cfcc