openvibers/openvibe.network Commits

openvibe.link's vhost passes its egress settings script (#735)

OP OpenVibers committed 4 days ago · 87944111b4 · 2 files, +3 −3

* openvibe.link vhost passes /egress-settings.js to Network; the old name in its comment is node.openvibe.network

* Link vhost test names egress-settings.js; the comment describes the old hostname without the guarded literal

Changes

ddiff --git a/deploy/nginx/parked-domains.conf b/deploy/nginx/parked-domains.conf
iindex c3c6d3da..f9f29a11 100644
---- a/deploy/nginx/parked-domains.conf
++++ b/deploy/nginx/parked-domains.conf
@@@ -144,7 +144,7 @@ server {
  }
  
  # openvibe.link: OpenVibe Link's home since 2026-11-07, served by OpenVibe.Network on 127.0.0.1:4000, which
--# renders the Link page when the Host is openvibe.link. The old name openvibe.link 301s there from the
++# renders the Link page when the Host is openvibe.link. The old machines subdomain of openvibe.network 301s there from the
  # app (except /install, which keeps serving the installer); www.openvibe.link is not a second home and 301s to
  # the apex here, and the app does the same for a request that reaches it on the www host.
  #
@@@ -202,7 +202,7 @@ server {
          proxy_set_header X-Forwarded-Proto $scheme;
          add_header Cache-Control "no-store" always;
      }
--    location ~ ^/(|install|machines|pair|index\.md|send\.js|locker\.mjs|llms\.txt|llms-full\.txt|robots\.txt|sitemap\.xml|\.well-known/agent\.json)$ {
++    location ~ ^/(|install|machines|pair|index\.md|send\.js|egress-settings\.js|locker\.mjs|llms\.txt|llms-full\.txt|robots\.txt|sitemap\.xml|\.well-known/agent\.json)$ {
          limit_except GET HEAD { deny all; }
          proxy_pass http://127.0.0.1:4000;
          proxy_http_version 1.1;
ddiff --git a/test/link-home.test.js b/test/link-home.test.js
iindex 69b8d5e0..24c229f3 100644
---- a/test/link-home.test.js
++++ b/test/link-home.test.js
@@@ -61,7 +61,7 @@ const SHAPED = {
  
      // The vhost must send /machines and /pair to the app (which signposts them), not the catch-all to Network.
      const vhost = fs.readFileSync(path.join(__dirname, '..', 'deploy', 'nginx', 'parked-domains.conf'), 'utf8');
--    assert.ok(/location ~ \^\/\(\|install\|machines\|pair\|index\\\.md\|send\\\.js\|locker\\\.mjs\|/.test(vhost), 'the vhost proxies Link Send assets to Network');
++    assert.ok(/location ~ \^\/\(\|install\|machines\|pair\|index\\\.md\|send\\\.js\|egress-settings\\\.js\|locker\\\.mjs\|/.test(vhost), 'the vhost passes the page\'s scripts (send.js, egress-settings.js) and the Locker bundle to Network');
      const sendApi = vhost.slice(vhost.indexOf('location ~ ^/api/v1/me/nodes/(send-keys|send)$ {'));
      assert.ok(sendApi.length < vhost.length && /client_max_body_size 40m;/.test(sendApi.slice(0, sendApi.indexOf('\n    }'))), 'the Link Send API has its own location with a body limit that fits a file');
      // …and /auth/* to Link's own sign-in (Network#664), or openvibe.link never signs anyone in (11-08 audit).