nexxo c0cd367a0e Drop the public endpoint: the command line already carries what the host needs ... The operator was right to challenge POST /enrol. The three values a script needs before the tunnel exists — hub key, hub address, assigned tunnel IP — are all known to the console when the host is created, so they travel in the copied command instead of being fetched. The one thing that forced an endpoint was the hub needing the host's public key before the tunnel is up. So the console generates the pair and hands it over, and the host swaps in a freshly generated key through the tunnel afterwards. The key that passed through a clipboard lives for minutes. Net effect: the network boundary is unchanged. No new way in from outside. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-07-30 18:25:02 +02:00
..
plans	Put the price recognition back, all 3526 lines of it	2026-07-30 16:35:55 +02:00
specs	Drop the public endpoint: the command line already carries what the host needs	2026-07-30 18:25:02 +02:00