Jens/geointel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: make example access and model scope fail closed

Browse Source
This commit is contained in:
Jens
2026-08-26 22:16:58 +02:00
parent 1bbe3d2de0
commit ca8b87f1c4
1 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env.example
+7 -6
View File
@@ -7,14 +7,14 @@ MAX_UPLOAD_MB=500
CORS_ORIGINS=http://localhost:1202,http://127.0.0.1:1202 CORS_ORIGINS=http://localhost:1202,http://127.0.0.1:1202
# Optional single-operator access gate. Store only a PBKDF2-SHA256 hash and # Optional single-operator access gate. Store only a PBKDF2-SHA256 hash and
# a unique 32+ character signing secret. Guest access is enabled by default # a unique 32+ character signing secret. Guest access is demo-only and opt-in;
# whenever this gate is active; disable it explicitly on non-demo instances. # enable it only on a dedicated demo instance without private/operational data.
GEOINTEL_AUTH_ENABLED=false GEOINTEL_AUTH_ENABLED=false
GEOINTEL_AUTH_USERNAME= GEOINTEL_AUTH_USERNAME=
GEOINTEL_AUTH_PASSWORD_HASH= GEOINTEL_AUTH_PASSWORD_HASH=
GEOINTEL_AUTH_SESSION_SECRET= GEOINTEL_AUTH_SESSION_SECRET=
GEOINTEL_AUTH_SESSION_TTL_SECONDS=43200 GEOINTEL_AUTH_SESSION_TTL_SECONDS=43200
GEOINTEL_GUEST_ACCESS_ENABLED=true GEOINTEL_GUEST_ACCESS_ENABLED=false
GEOINTEL_GUEST_DISPLAY_NAME=Gast GEOINTEL_GUEST_DISPLAY_NAME=Gast
GEOINTEL_GUEST_SESSION_TTL_SECONDS=7200 GEOINTEL_GUEST_SESSION_TTL_SECONDS=7200
ORTHOPHOTO_ENABLED=true ORTHOPHOTO_ENABLED=true
@@ -118,9 +118,10 @@ YOLO_MODEL_ID=yolo-configured
YOLO_MODEL_DISPLAY_NAME=Configured YOLO detector YOLO_MODEL_DISPLAY_NAME=Configured YOLO detector
YOLO_MODEL_VERSION= YOLO_MODEL_VERSION=
YOLO_MODEL_CLASSES=building YOLO_MODEL_CLASSES=building
YOLO_ENFORCE_VALIDATION_SCOPE=false YOLO_ENFORCE_VALIDATION_SCOPE=true
# Required when scope enforcement is enabled. The manifest is bound to exact # Required for configured YOLO inference when scope enforcement is enabled.
# model bytes and contains the allowed EPSG:4326 validation geometry. # Missing/invalid evidence keeps the GIS app online but makes YOLO unavailable.
# The manifest is bound to exact model bytes and allowed EPSG:4326 geometry.
YOLO_VALIDATION_SCOPE_MANIFEST_PATH= YOLO_VALIDATION_SCOPE_MANIFEST_PATH=
YOLO_VALIDATION_SCOPE_MANIFEST_SHA256= YOLO_VALIDATION_SCOPE_MANIFEST_SHA256=
# Deprecated display metadata; never used as an inference authorization gate. # Deprecated display metadata; never used as an inference authorization gate.