Skip to content

Commit c420d6a

Browse files
committed
Revert "docs: remove obsolete notice"
This reverts commit 44431c2.
1 parent d6eedec commit c420d6a

File tree

1 file changed

+11
-1
lines changed

1 file changed

+11
-1
lines changed

README.md

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,14 +4,24 @@ This is a free and simple builder server for [ios-signer-service](https://github
44

55
You only need to configure one builder. If you already configured a CI provider as your builder, you don't need to do anything here. This project is aimed at people who want to have a self-hosted builder.
66

7-
## Security
7+
## Important
8+
9+
### Security
810

911
This server requires the use of an authentication key so that only the web service can control your builder. However, there is no built-in support for HTTPS or any other form of encryption. Therefore:
1012

1113
> :warning: **Anybody with access to the builder's network can potentially manipulate the builder to execute any code that they want on your machine.**
1214
1315
To prevent this, only deploy this server in a trusted environment, or even better, wrap the server in HTTPS yourself using a reverse proxy like nginx.
1416

17+
### Side effects on your Mac
18+
19+
While the server will do its best to keep changes to your Mac at a minimum, certain changes are inevitable. The biggest one to know is:
20+
21+
> :warning: **Your keychain will be swapped out during signing and restored back afterwards.**
22+
23+
It is highly recommended that you dedicate this Mac exclusively as a builder. Using it for other purposes, especially at the same time as a sign job is running, could lead to random issues.
24+
1525
## Setup
1626

1727
All the steps should be performed on your builder Mac.

0 commit comments

Comments
 (0)