ikuradon

Lumilumi 全ソースコード監査レポート

対象: lumilumi (SvelteKit + Svelte 5 Nostrクライアント) — 415ソースファイル 監査日: 2026-03-21 監査観点: セキュリティ / バグ・ロジック / TypeScript品質 / アーキテクチャ / パフォーマンス・メモリ 監査方法: 5つの専門エージェントによる並列静的解析

---

エグゼクティブサマリー

ikuradon

services:
  strfry-relay:
    image: local/strfry
    build:
      context: ../repos/strfry
      dockerfile: Dockerfile.custom
    restart: always
    volumes:
      - ./data/strfry/strfry.conf:/etc/strfry.conf:ro
      - ./repos/writepolicy:/writepolicy

ikuradon

streams {
  # Template
  # name {
  #   dir = "down|up|both"
  #   pluginDown = "/app/test.script"
  #   pluginUp = "/app/test.script"
  #   filter = { "kinds": [0] }
  #   urls = [
  #     "wss://example.com"
  #   ]

ikuradon

FROM getumbrel/umbrel-lightning:v1.1.1
RUN find /app -not -path "*node_modules*" -name "*.js" -exec sed -i 's/routerrpc.apriorihopprob/routerrpc.apriori.hopprob/g' {} \; \
    && find /app -not -path "*node_modules*" -name "*.js" -exec sed -i 's/routerrpc.aprioriweight/routerrpc.apriori.weight/g' {} \; \
    && find /app -not -path "*node_modules*" -name "*.js" -exec sed -i 's/routerrpc.penaltyhalflife/routerrpc.apriori.penaltyhalflife/g' {} \; \
    && find /app -not -path "*node_modules*" -name "*.js" -exec sed -i 's/routerrpcApriorihopprob/routerrpcAprioriHopprob/g' {} \; \
    && find /app -not -path "*node_modules*" -name "*.js" -exec sed -i 's/routerrpcAprioriweight/routerrpcAprioriWeight/g' {} \; \
    && find /app -not -path "*node_modules*" -name "*.js" -exec sed -i 's/routerrpcPenaltyhalflife/routerrpcAprioriPenaltyhalflife/g' {} \;

ikuradon

# Pleroma instance configuration

# NOTE: This file should not be committed to a repo or otherwise made public
# without removing sensitive information.

use Mix.Config

config :pleroma, Pleroma.Web.Endpoint,
   url: [host: "v01d.app", scheme: "https", port: 443],
   secret_key_base: "[REDACTED]"

ikuradon

proxy_cache_path /var/cache/nginx/media.comm.cx levels=1:2 keys_zone=media.comm.cx_cache:10m inactive=7d max_size=10g;
server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name media.comm.cx;
    ssl_certificate /CERT/comm.cx.crt;
    ssl_certificate_key /CERT/comm.cx.key;
    include ssl.conf;

    keepalive_timeout    70;

ikuradon

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:ListAllMyBuckets",
        "s3:GetBucketLocation"
      ],
      "Resource": "arn:aws:s3:::*"

ikuradon

Updated at: 2017-07-23 22:42:06
1970-01-01: mastodon.mita.me
1970-01-01: mastodon.fun
1970-01-01: misanthropy.wang
1970-01-01: mastodon.not-enough.space
1970-01-01: myfreckle.com
1970-01-01: mastodon.direct
1970-01-01: tooot.im
1970-01-01: mastodon.center
1970-01-01: boredom.land

ikuradon

namespace :sidekiq do
    desc "Stop sidekiq safely."
    task :stop do
        processes = Sidekiq::ProcessSet.new
        abort 'Sidekiq process not running' if processes.count == 0

        processes.each do |process|
            process.quiet!
            puts "Send quiet signal to PID: #{process['pid']}"
        end

ikuradon

Keybase proof

I hereby claim:

• I am ikuradon on github.
• I am ikuradon (https://keybase.io/ikuradon) on keybase.
• I have a public key whose fingerprint is 2CE4 DB2A 094F 97F2 B73E 9E28 E64E C221 E099 BA05

To claim this, I am signing this object: