dadaloop82
d33b0ca2fe
Block web access to sensitive paths, require API_TOKEN for mutations, encrypt GitHub issue credentials in .env, auto-provision tokens for same-origin clients, and pass api_token in scale relay URLs since EventSource cannot send headers. Co-authored-by: Cursor <cursoragent@cursor.com>
3 lines
92 B
ApacheConf
3 lines
92 B
ApacheConf
# Deny all direct HTTP access to runtime data (DB, tokens, caches, logs)
|
|
Require all denied
|