bflatastic e0435d4eb4 M9: close the remaining open-hosting DoS paths ...

Second security review:
- a broadcast counts once against the queued-bytes budget; each block of
  addresses gets at most an eighth; when the budget runs out the biggest
  consumer is shed, not the receiver
- forced compactions at most once a minute per file
- plugin downloads check the per-address share before the global budget
  and before reading
- install.sh never replaces a Caddyfile with other sites (one import line,
  once; install-test.sh in packaging lint); the built binary runs only as
  the server's account
- bytes being read count against per-block and global budgets, the
  biggest readers dropped first
- block multipliers x2 (/56) and x4 (/48), connection caps at most a
  sixteenth/eighth of all; global publish and download budgets eight times
  a /48's share
- problems capped at 200; writes refused below max(1 GiB, two files) free;
  the private-server file cap documented

2026-10-12 11:40:03 +07:00

..

workflows

M9: close the remaining open-hosting DoS paths

2026-10-12 11:40:03 +07:00

actionlint.yaml

Release prep: 0.3.0 and linux-riscv64 release job (#108)

2026-10-10 19:42:22 -04:00