Launch hardening: TC bit, Dockerfile, deploy, truncation fix #5

2026-03-21T09:33:42+08:00

dearsky commented

2026-03-21 09:33:42 +08:00

(Migrated from gitea.proxy.dearsky.top)

Summary

TC bit handling — set truncation flag on oversized responses instead of dropping silently
Forward receive — log when upstream response is truncated
Dockerfile — bump Rust 1.88, alpine runtime, includes site/service files
Makefile deploy — platform-aware: codesign on macOS, systemctl on Linux
README — trim roadmap to near-term items only

Test results

make all passes (fmt + clippy + build)
docker build compiles on Linux (Alpine musl)
Docker smoke test: DNS resolution, blocklist download, TLS cert generation all work
make deploy works on macOS

🤖 Generated with Claude Code

## Summary - **TC bit handling** — set truncation flag on oversized responses instead of dropping silently - **Forward receive** — log when upstream response is truncated - **Dockerfile** — bump Rust 1.88, alpine runtime, includes site/service files - **Makefile deploy** — platform-aware: codesign on macOS, systemctl on Linux - **README** — trim roadmap to near-term items only ## Test results - [x] `make all` passes (fmt + clippy + build) - [x] `docker build` compiles on Linux (Alpine musl) - [x] Docker smoke test: DNS resolution, blocklist download, TLS cert generation all work - [x] `make deploy` works on macOS 🤖 Generated with [Claude Code](https://claude.com/claude-code)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: PullFromGitHub/numa#5