From 7357072b9edaa78430682da6ddac029028675fa3 Mon Sep 17 00:00:00 2001 From: Offending Commit Date: Tue, 2 Jun 2026 13:17:25 -0500 Subject: [PATCH] docs(docker): drop stale same-origin sentinel from entrypoint comment --- docker/40-openconcho-config.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docker/40-openconcho-config.sh b/docker/40-openconcho-config.sh index cba4a9e..547b81d 100644 --- a/docker/40-openconcho-config.sh +++ b/docker/40-openconcho-config.sh @@ -1,7 +1,8 @@ #!/bin/sh # Regenerate the SPA's runtime config from the environment at container start. # Lets one prebuilt image target any Honcho backend without a rebuild. -# OPENCONCHO_DEFAULT_HONCHO_URL — absolute URL, "same-origin", or empty. +# OPENCONCHO_DEFAULT_HONCHO_URL — absolute URL seeding the first instance, or empty. +# OPENCONCHO_UPSTREAM_ALLOWLIST — optional comma-separated host globs (SSRF guard). # Runs from /docker-entrypoint.d before nginx starts. Requires the html dir to # be writable (default); skip or bind-mount config.js when running --read-only. set -eu