Could you please explain these lines in your shell script?
ipfs config --json API.HTTPHeaders.Access-Control-Allow-Origin "[\"*\"]"
ipfs config --json API.HTTPHeaders.Access-Control-Allow-Credentials "[\"true\"]"
ipfs config --json API.HTTPHeaders.Access-Control-Allow-Methods "[\"PUT\", \"POST\", \"GET\"]"
It seems like I would be opening up my IPFS instance to be controlled by anyone throwing commands at it. How can I be sure I'm only letting your "pin on upvote" function have access to pin things on my node?
As long as your IPFS API is only open to 127.0.0.1 it should be fine. If you check the ipfs config file, you should see in Addresses.API that it is only allowing local connections. If you want to open your API to the external world, you'd need to replace that by 0.0.0.0 ;)
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit