tlsync

Go to file

kcar e0f2207848 security: restrict CORS, add auth token, rate limiting, health endpoint, graceful shutdown

- Replace wildcard CORS with configurable TLSYNC_ALLOWED_ORIGINS env var
- Add TLSYNC_SECRET token validation on /connect/:roomId (401 if missing/wrong)
- Add in-memory rate limiter: max 20 connections per IP per 60s
- Add GET /health endpoint returning status + uptime
- Add SIGTERM/SIGINT graceful shutdown handlers
- Fix hardcoded Access-Control-Allow-Origin: * on uploads and unfurl routes
- Fix rooms.ts: import TLSchema/TLStore/TLStoreOptions from @tldraw/tlschema not tldraw
- Add @tldraw/tlschema 3.6.1 as direct dependency (was transitive, causing ENOENT crash)
- Add named tlsync-node-modules volume to docker-compose to prevent host mount shadowing image packages

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-21 17:06:18 +00:00

src

security: restrict CORS, add auth token, rate limiting, health endpoint, graceful shutdown

2026-05-21 17:06:18 +00:00

.gitignore

chore: ignore core binary file

2026-05-13 22:44:12 +00:00

bun.lock

chore: add lock files for reproducible builds

2026-02-23 17:48:36 +00:00

bunfig.toml

Initial commit