Skip to content

Operating the board

This page covers running the rendezvous board in production. It follows the deployment recipe in the README.

The board is the rendezvous server: it routes opaque tags and forwards sealed payloads. Because of the blindness invariant, an operator who runs the board still cannot read user traffic. TODO: reproduce the exact deployment recipe steps from the README.

The board is configured by environment variables.

VariablePurpose
TODOTODO: confirm the env var names, defaults, and required vs optional against the README and board/.

TODO: fill this table from the board configuration.

When autoscaling the board, note the documented caveat that inside a container os.freemem() reports host memory, not the container’s limit, so memory-based scaling signals can be misleading. Plan capacity accordingly. TODO: confirm the exact caveat wording and recommended mitigation.

Terminate TLS at a reverse proxy in front of the board rather than in the board process itself. TODO: confirm the recommended proxy configuration from the README.

The board is licensed under AGPL-3.0. Because the board is a network service, the AGPL network obligation (AGPL §13) applies: if you run a modified board and expose it over a network, you must offer users of that service the corresponding source of your modified version. The Apache-licensed core, client, spec, and tests do not carry this obligation; only the board does.

See licensing and the repository LICENSING.md.

Source: README (deployment recipe, env vars, freemem caveat, TLS), LICENSING.md and AGPL §13 (network obligation), SPEC §13. TODO: confirm the recipe, env vars, and obligation wording (see OPEN-QUESTIONS.md).