From 815ec2e9a641ad5ac5c2f886291e63c89966bd6c Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Sat, 24 Oct 2026 19:25:54 +0200
Subject: only protocol-writers may modify _continuum

---
 src/config/mod.rs | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'src/config')

diff --git a/src/config/mod.rs b/src/config/mod.rs
index 4914fb6..ef28542 100644
--- a/src/config/mod.rs
+++ b/src/config/mod.rs
@@ -81,6 +81,13 @@ pub(crate) const OPTIONS: &[OptionSpec] = &[
         None,
         "Users of the HTTP API (htpasswd file with Argon2 hashes). Required.",
     ),
+    option(
+        "protocol-writers",
+        Kind::List,
+        "USER,[USER...]",
+        None,
+        "HTTP API users (from htpasswd) who may write protocol data under /store/_continuum (remake records, members, forget records), e.g. to repair a stuck remake. Such writes act on the whole swarm and are logged. Epoch metadata is never writable.",
+    ),
     option(
         "debug-api",
         Kind::Flag,
@@ -201,6 +208,8 @@ pub(crate) struct Settings {
     pub(crate) bind_addr: SocketAddr,
     pub(crate) htpasswd: String,
     #[serde(default)]
+    pub(crate) protocol_writers: Vec<String>,
+    #[serde(default)]
     pub(crate) debug_api: bool,
     #[serde(default)]
     pub(crate) seeds: Vec<String>,
-- 
cgit v1.3.1