Zhengqikk 3732 Update — NoPager’s incident authority UX is now live I’ve just shipped a major OSS UI update based on early security feedback. The incident flow now makes the execution boundary explicit before anything happens: Trigger → Evidence → AI assessment → Policy → Exact action → Exact target → Attempt budget → Approval → Verification → Outcome The worker still has no Docker socket, Docker group, Docker CLI, or arbitrary shell access. Safe Mode remains the default. The first real operations path is intentionally narrow: 3 failed HTTPS checks → incident → AI triage → one bounded restart_container proposal → human approval → restart exactly one enrolled container → external HTTPS + container-state verification I’m now specifically looking for people willing to actually run it on a disposable/non-critical Linux Docker service. I’m much more interested in: “setup failed here” “I don’t trust this permission” “the incident didn’t recover” “this approval UI is missing something” than general product opinions. OSS: https://github.com/nopager/nopager If you’re willing to test the full loop, I’m happy to help personally with setup.

Jacob Paris Your headers are being added twice. When this happens they get merged together and that's probably creating an invalid final value. I'm guessing you've tried to configure the same CORS setup in both Laravel and in Nginx/OpenResty. Removing one of these should fix it When you check your request in the network tab of your browser, you want to see these headers and no duplicates ``` Access-Control-Allow-Origin: https://elkj-pos.vercel.app Access-Control-Allow-Credentials: true ``` Alternatively: the easiest way to get around CORS is to not make any cross-origin requests in the first place. - If you're using a full stack framework like Next.js, you can route your requests through the same-origin Next.js backend toward your API. This might feel like an extra step, but server -> server requests are much faster than client -> server as they're between (or within) datacenters. - You could also use proxy rewrites to route traffic from your app domain to your Laravel Server. We use this to mix Next.js pages into the Discourse platform on this website. https://vercel.com/blog/how-we-run-vercels-cdn-in-front-of-discourse#vercel-as-a-cdn Both of those solutions mean your website is only ever sending requests to its own domain, which eliminates CORS and allows you to use more secure authentication methods like HttpOnly SameSite cookies.

NextBlock™ CMS Thanks for checking this out, @amyegan! What is the current criteria or best path for community open-source starters like NextBlock to be considered for the official Vercel Templates gallery?

Amy Egan I love seeing so many awesome things people have build with shadcn/ui! Thanks for sharing this dashboard toolkit

Vaibhav Gupta Glad to see you liked it!!

Abhivarde cool concept!