From e6ff2b91aebcf2e69a988dc04627cd987c2a0f47 Mon Sep 17 00:00:00 2001
From: kj_sh604
Date: Fri, 3 Apr 2026 17:34:35 -0400
Subject: refactor: some productionization changes

---
 README | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'README')

diff --git a/README b/README
index 1494a32..b0e2a55 100644
--- a/README
+++ b/README
@@ -14,12 +14,16 @@ quick start (assumes POSIX)
   - python3 server.py
   - open http://127.0.0.1:8585/app
 
+production configuration (gunicorn)
+  - gunicorn server:app --bind 0.0.0.0:8585 --workers 2 --threads 4 --timeout 60 --graceful-timeout 30 --keep-alive 5 --access-logfile - --error-logfile -
+
 config
   - SHIM_APP_NAME: ui/app name (default: shim)
   - SHIM_BIND: bind address (default: 0.0.0.0)
   - SHIM_PORT: port (default: 8585)
   - SHIM_MOJICRYPT_BIN: mojicrypt path (default: ./vendor/mojicrypt)
   - SHIM_COOKIE_SECURE: auto|true|false (default: auto)
+  - SHIM_ENFORCE_APP_REQUEST_GUARDS: false by default (set true only when proxy/host headers are correct)
   - SHIM_SQLITE_TIMEOUT_SECONDS (default: 30.0)
   - SHIM_SQLITE_BUSY_TIMEOUT_MS (default: 30000)
   - SHIM_SQLITE_CACHE_SIZE_KIB (default: 32768)
-- 
cgit v1.2.3