Closes HH-620
- publish 9091 and 7890 on host loopback by default while keeping 9090 private
- require a host HTTPS reverse proxy for external 9091 access; direct public HTTP is not configurable in Compose
- provide explicit 7890 public/trusted-network opt-in through `PROXY_BIND`
- initialize fresh volumes with SSClash `setpass` before listeners and strictly validate persisted authentication
- repair only SSClash-managed provider links during same-volume container rebuilds
- keep bootstrap credentials out of service environments, runtime files, and logs
- smoke-test loopback-only defaults, proxy-only public opt-in, non-loopback unreachability, authenticated 9091, and same-volume rebuild/login
Tests: `./scripts/test.sh`; `./tests/container-smoke.sh`; `git diff --check`
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Closes HH-620
PROXY_BINDsetpassbefore listeners and strictly validate persisted authenticationTests:
./scripts/test.sh;./tests/container-smoke.sh;git diff --check