Apppublic

simata/huggingmes

sourceHugging Facemitupdated 4mo agoView on Hugging Face

1likes

SECURITY.md15 linesDownload Raw Back to root

1# Security2 3HuggingMes runs a full agent gateway with tool access. Treat the Space and its secrets like a server.4 5## Required Hardening6 7- Set `GATEWAY_TOKEN`; `/v1/*` routes require `Authorization: Bearer <GATEWAY_TOKEN>`.8- Set `TELEGRAM_ALLOWED_USERS` to numeric Telegram user IDs.9- Keep your HF Dataset backup private.10- Do not enable `SYNC_INCLUDE_ENV=true` unless you intentionally want `/opt/data/.env` backed up.11 12## Reporting13 14Open a private issue or contact the maintainer directly with reproduction steps and affected configuration.15