mirror of
https://github.com/Dokploy/dokploy.git
synced 2026-10-19 15:11:36 +00:00
Mauricio Siu
d313ae3ded
Blocks every non-query tRPC procedure (mutations and subscriptions), the local/remote terminal websockets, and the unauthenticated deploy webhooks when IS_DEMO=true. Login still works; sign-up and every better-auth endpoint except sign-in/get-session/sign-out is blocked via an allowlist. Also fixes settings.getUpdateData, which was declared as a mutation even though it only reads version info — the demo guard caught it as a false positive, so reclassified it as a query.