LFS Cloud v0.2.2
·
40 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
- [added]: Generate durable-session encryption keys in the native credential store and add confirmed
lfscloud sessions generate-keyrotation that invalidates current sessions. - [changed]: Hold an exclusive lifecycle lock for each metadata database so only one server can retain its sessions in memory and key rotation refuses to run while that server is active.
- [changed]: Listen on
0.0.0.0:15370by default and infer Git LFS action URLs from each accepted connection, while retainingserver.public_urlfor explicit hostname and proxy overrides. - [changed]: Default GitHub repository providers to
https://api.github.comsoapi_urlis needed only for GitHub Enterprise or another override. - [fixed]: Let configuration commands clear a stored GitHub API override and keep managed session-key bytes zeroed after use.
- [documentation]: Explain the credential exposure of plaintext LAN HTTP and the encrypted-tunnel but application-HTTP tradeoff for direct Tailscale access.