configure Bun CA trust for local embeddings

2026-09-07 21:27:25 -07:00
parent 700f3f2cbd
commit de3357ca58
2 changed files with 4 additions and 1 deletions
@@ -36,7 +36,9 @@ The `supermemory-fetch` init service downloads the exact release asset once,
 checks its SHA-256, and stores it in the POC appdata directory. Subsequent
 starts only verify the existing binary. It also copies the CA bundle from the
 pinned fetch image so the slim runtime can download local embedding model
-artifacts over verified HTTPS. No custom image build is required.
+artifacts over verified HTTPS. Both OpenSSL-style clients and the bundled Bun
+runtime are pointed at that bundle; TLS verification remains enabled. No
+custom image build is required.

 ## First boot and authentication