From 8497497e9141c3b28e6548a8fe94fcc4ef19de05 Mon Sep 17 00:00:00 2001 From: Immune System Date: Thu, 3 Sep 2026 10:14:22 +0900 Subject: [PATCH 1/2] Harden challenge iteration 2 --- compose.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/compose.yml b/compose.yml index 9107bed..81f12f8 100644 --- a/compose.yml +++ b/compose.yml @@ -13,8 +13,8 @@ services: TZ: ${TZ:-Asia/Seoul} BV_CHALLENGE_API_PORT: ${BV_CHALLENGE_API_PORT:-10001} BV_CHALLENGE_API_BOT_RUNNER_URL: ${BV_CHALLENGE_API_BOT_RUNNER_URL:-http://bot-runner:8000} - BV_CHALLENGE_API_BOT_RUNNER_SESSION_COUNT: ${BV_CHALLENGE_API_BOT_RUNNER_SESSION_COUNT:-2} - BV_CHALLENGE_API_BOT_RUNNER_REQUEST_TIMEOUT_SEC: ${BV_CHALLENGE_API_BOT_RUNNER_REQUEST_TIMEOUT_SEC:-900} + BV_CHALLENGE_API_BOT_RUNNER_SESSION_COUNT: ${BV_CHALLENGE_API_BOT_RUNNER_SESSION_COUNT:-5} + BV_CHALLENGE_API_BOT_RUNNER_REQUEST_TIMEOUT_SEC: ${BV_CHALLENGE_API_BOT_RUNNER_REQUEST_TIMEOUT_SEC:-300} env_file: - path: .env required: false From 2ae320b8a9674eceb4da7142e6a649966617c047 Mon Sep 17 00:00:00 2001 From: Immune System Date: Thu, 3 Sep 2026 10:17:05 +0900 Subject: [PATCH 2/2] Harden challenge iteration 2 --- compose.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/compose.yml b/compose.yml index 81f12f8..695720b 100644 --- a/compose.yml +++ b/compose.yml @@ -13,8 +13,8 @@ services: TZ: ${TZ:-Asia/Seoul} BV_CHALLENGE_API_PORT: ${BV_CHALLENGE_API_PORT:-10001} BV_CHALLENGE_API_BOT_RUNNER_URL: ${BV_CHALLENGE_API_BOT_RUNNER_URL:-http://bot-runner:8000} - BV_CHALLENGE_API_BOT_RUNNER_SESSION_COUNT: ${BV_CHALLENGE_API_BOT_RUNNER_SESSION_COUNT:-5} - BV_CHALLENGE_API_BOT_RUNNER_REQUEST_TIMEOUT_SEC: ${BV_CHALLENGE_API_BOT_RUNNER_REQUEST_TIMEOUT_SEC:-300} + BV_CHALLENGE_API_BOT_RUNNER_SESSION_COUNT: ${BV_CHALLENGE_API_BOT_RUNNER_SESSION_COUNT:-10} + BV_CHALLENGE_API_SECURITY_HEADERS_STRICT_TRANSPORT_SECURITY: "max-age=31536000; includeSubDomains; preload" env_file: - path: .env required: false @@ -36,7 +36,7 @@ services: TERM: ${TERM:-xterm} TZ: ${TZ:-UTC} VM_RUNNER_API_PORT: ${VM_RUNNER_API_PORT:-8000} - DOCKER_HOST: unix:///docker-socket/docker.sock + DOCKER_HOST: unix:///var/run/docker.sock CHALLENGE_HTTPS_PROXY_PORT: ${CHALLENGE_HTTPS_PROXY_PORT:-10443} MDM_CHALLENGE_COMMIT_DIR: /commit env_file: