[GeiserX]

The FAQ's security answer still says CashPilot's containers can reach your local network by default. That stopped being true in 1.70: a new install fences its earners off the LAN, the host, the tailnet and cloud metadata by itself. Someone reading the FAQ would think they still have to set this up by hand, or that it does not exist.

The answer now says:

• a new install is fenced by default, with a link to the isolation page;
• an install upgraded from a release before 1.70 stays on Docker's default bridge until Turn on isolation is clicked on the Fleet page;
• host-networked services (Mysterium) are still not covered, and where to read about them.

The Storj figure the review flagged is already consistent on main: the catalog entry and the guide both say "about 98%" since #604. Nothing to change there, so services/ is untouched and Desktop's vendored catalog needs no sync.

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 49 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

Run configuration

• Source mode: Auto
• Repository: GeiserX/CashPilot
• Branch: docs/faq-lan-fence
• File: .coderabbit.yaml
• Commit: d130f8e
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 212686d2-9150-4c5a-9064-0e77dfdabc56

Commits

Reviewing files that changed from the base of the PR and between 6d5ab59 and d130f8e.

Files selected for processing: 1

• docs/faq.md

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[GeiserX]

Landed in #653 (f681889), which combined this fix with the others into one release.