Grayscale/nanobot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,453 Commits 1 Branch 1 Tag
4a3818e03ca61a4f20ae484d2b99dc12fa19d43a
Commit Graph
9 Commits
Author SHA1 Message Date
Xubin Ren 3824206ab2 fix(gateway): harden health endpoint exposure 2026-07-13 15:16:51 +08:00
huanglei.214andXubin Ren 3bf8de047a fix docker build 2026-05-17 15:51:04 +08:00
Xubin RenandXubin Ren d108879b48 security: bind api port to localhost by default 
Prevents accidental exposure to the public internet. Users who need
external access can change to 0.0.0.0:8900:8900 explicitly.

Made-with: Cursor
 2026-04-06 16:20:20 +08:00
Xubin RenandXubin Ren 634261f07a fix: correct api-workspace path for non-root container user 
The Dockerfile runs as user nanobot (HOME=/home/nanobot), not root.

Made-with: Cursor
 2026-04-06 16:20:20 +08:00
dengjingrenXubin RenClaude Opus 4.6
 		d99331ad31 feat(docker): add nanobot-api service with isolated workspace 
- Add nanobot-api service (OpenAI-compatible HTTP API on port 8900)
- Uses isolated workspace (/root/.nanobot/api-workspace) to avoid
  session/memory conflicts with nanobot-gateway

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-04-06 16:20:20 +08:00
Xubin Ren cef0f3f988 refactor: replace podman-seccomp.json with minimal cap_add, harden bwrap, add sandbox tests 2026-04-05 19:03:06 +00:00
kinchahoy 7913e7150a feat: sandbox exec calls with bwrap and run container as non-root 2026-03-16 23:55:19 -07:00
Re-bin aad1df5b9b Simplify Docker Compose docs and remove fixed CLI container name 2026-02-17 17:55:48 +00:00
Rajasimman S c03f2b670b 🐳 feat: add Docker Compose support for easy deployment 
Add docker-compose.yml with gateway and CLI services, resource limits,
and comprehensive documentation for Docker Compose usage.
 2026-02-17 18:50:03 +05:30