channel-exit

2 Commits 1 Branch 0 Tags

2 Commits

Include renames

Author	SHA1	Message	Date
Nirav PatelandClaude Opus 5	399487862c	Reach consumers by network, not by a second host bind CI / test (push) Successful in 16s Details The compose file published a second host port on the docker bridge IP so sibling containers could reach the relay. That is a host-reachable address for a service whose entire safety story is that it has exactly one, on loopback. It joins the consumers' existing docker network instead, and is reached there by name on the container port. Nothing about a consumer's deployment has to change to use it, and the relay gains no address outside that network. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>	2026-08-18 19:25:11 -04:00
nirpa	e4d6230dd1	The estate's one channel exit Services that need to reach a person hand the message here instead of each carrying a SendGrid key. Email goes to SendGrid, SMS to Twilio; whatsapp and push answer 501 rather than pretending. It binds loopback and the docker bridge only. An authenticated relay on the public internet is an open spam relay the moment the token leaks, and that token is copied into every consumer's environment. The log names a channel, a redacted address and the provider's answer. Never the subject, never the body.	2026-08-18 15:41:28 -04:00

Author

SHA1

Message

Date

Nirav PatelandClaude Opus 5

399487862c

Reach consumers by network, not by a second host bind

CI / test (push) Successful in 16s

Details

The compose file published a second host port on the docker bridge IP so
sibling containers could reach the relay. That is a host-reachable address for
a service whose entire safety story is that it has exactly one, on loopback.

It joins the consumers' existing docker network instead, and is reached there
by name on the container port. Nothing about a consumer's deployment has to
change to use it, and the relay gains no address outside that network.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>

2026-08-18 19:25:11 -04:00

nirpa

e4d6230dd1

The estate's one channel exit

Services that need to reach a person hand the message here instead of each
carrying a SendGrid key. Email goes to SendGrid, SMS to Twilio; whatsapp and
push answer 501 rather than pretending.

It binds loopback and the docker bridge only. An authenticated relay on the
public internet is an open spam relay the moment the token leaks, and that
token is copied into every consumer's environment.

The log names a channel, a redacted address and the provider's answer. Never
the subject, never the body.

2026-08-18 15:41:28 -04:00