inference-bot
fd34e33508
- Dockerfile: pin ghcr.io/berriai/litellm:v1.84.0 (was floating main-v1.74.0-stable, which silently moved to a newer digest). v1.84.0 is the fix line for CVE-2026-35029 (auth bypass on /config/update, fixed 1.83.0) and CVE-2026-59822 (MCP session auth bypass, fixed 1.84.0, CISA KEV). - Drop the v1.74.0-era sed CORS patch: upstream v1.84.0 moved the file and now reads LITELLM_CORS_ORIGINS natively. - start.sh: export LITELLM_CORS_ORIGINS (the native v1.84.0 var) instead of LITELLM_CORS_ALLOWED_ORIGINS (the old sed-patch var that v1.84.0 ignores) — keeps CORS locked to chat.inference.coop. - CloudronManifest: upstreamVersion 1.74.0 -> 1.84.0. Live gateway already runs v1.84.0 (image digest sha256:dc532d896ba8..., built 2026-10-02 04:50 UTC); this commit makes the repo mirror the deployed packaging per the no-drift rule. LITELLM_CORS_ORIGINS also set as a Cloudron env var on the app so the running container honours it without a rebuild.
23 lines
772 B
JSON
23 lines
772 B
JSON
{
|
|
"id": "ai.coop.litellm",
|
|
"title": "LiteLLM Gateway",
|
|
"author": "inference.coop",
|
|
"description": "LiteLLM AI Gateway — OpenAI-compatible proxy with per-user API keys, usage tracking, rate limiting, and model routing. Packaged for Cloudron with SSO/OIDC and PostgreSQL.",
|
|
"tagline": "AI gateway for cooperative inference",
|
|
"version": "1.0.0",
|
|
"upstreamVersion": "1.84.0",
|
|
"healthCheckPath": "/health/readiness",
|
|
"httpPort": 4000,
|
|
"manifestVersion": 2,
|
|
"website": "https://litellm.ai",
|
|
"contactEmail": "botbot@hermes",
|
|
"icon": "file://logo.png",
|
|
"addons": {
|
|
"postgresql": {},
|
|
"redis": {},
|
|
"localstorage": {}
|
|
},
|
|
"tags": ["ai", "gateway", "proxy", "api"],
|
|
"mediaLinks": [],
|
|
"changelog": "Initial package for inference.coop"
|
|
} |