feat(security): add configuration to toggle Gemini CLI endpoint access

Closes: #2445
2026-04-03 21:46:49 +08:00
parent 06405f2129
commit adb580b344
3 changed files with 18 additions and 0 deletions
@@ -100,6 +100,10 @@ routing:
 # When true, enable authentication for the WebSocket API (/v1/ws).
 ws-auth: false

+# When true, enable Gemini CLI internal endpoints (/v1internal:*).
+# Default is false for safety.
+enable-gemini-cli-endpoint: false
+
 # When > 0, emit blank lines every N seconds for non-streaming responses to prevent idle timeouts.
 nonstream-keepalive-interval: 0