From dc3f25bc5f214ce3969610f4bb6fbe89079c109b Mon Sep 17 00:00:00 2001 From: Fabricio Giglio <58532944+gigliof@users.noreply.github.com> Date: Sun, 17 May 2026 21:04:59 +0200 Subject: [PATCH] Document public-deployment hardening steps and threat model --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 6aaaec4..ac52b9e 100644 --- a/README.md +++ b/README.md @@ -151,7 +151,7 @@ Restart the backend after installing. Without Basic Pitch, MIDI / MusicXML / PDF ⚠️ **Web MIDI is not available on iOS**, the on-screen keyboard works, but you cannot connect a hardware piano via USB or Bluetooth from iOS Safari. This is a WebKit limitation Apple has not addressed. -## ⚠️ Public deployments +## Public deployments If you're hosting Bach to Basics on the public internet (not on `localhost` or behind a VPN), set these env vars on the backend before exposing it: