Public: anyone can read this; the crew can change it.

Declare api.stripe.com in forge.json egress #92

Merged trevatoowner opened this 1mo ago

Check · Review · Land · Live done — Landed and live in production.

Merged

The forge now runs every app, preview, terminal and check in a cell whose only way out is a proxy (trevato/forge #658, pull #680). An app reaches the forge and the hosts its `forge.json` declares in `egress`, and nothing else.

shipped production is serving it deploy ab962da

trevatoowner opened this 1mo ago

The forge now runs every app, preview, terminal and check in a cell whose only way out is a proxy (trevato/forge #658, pull #680). An app reaches the forge and the hosts its forge.json declares in egress, and nothing else.

This app needs api.stripe.com: src/gateway.ts calls https://api.stripe.com from the server. Without this line, those calls are refused once egress is enforced. Until then, the forge lets them through and lists the host on the app's page.

Nothing else changes.