correct secondary ui server spec

[snadrus]

This allows limiting secondary servers to a specific list

[LexLuthr]

We should ship some default or document them. The cors in market http server are meant to allow serving static websites on PDP. We should let users decided what degree of risk they are okay with but we must either ship or document good default.

Also, do we want to share the CORS between UI and Market server since they are meant to serve different things?

[snadrus]

make marketgen is broken:
2025/09/25 11:30:37 create swagger.yaml at market/mk20/http/swagger.yaml
/Library/Developer/CommandLineTools/usr/bin/make -C extern/filecoin-ffi/ .install-filcrypto
go clean -cache -testcache
go: unlinkat /Users/andy/Library/Caches/go-build/c5: directory not empty
make[1]: *** [.install-filcrypto] Error 1
make: *** [build/.filecoin-install] Error 2

@LexLuthr Can you look into this?

[LexLuthr]

make marketgen is broken: 2025/09/25 11:30:37 create swagger.yaml at market/mk20/http/swagger.yaml /Library/Developer/CommandLineTools/usr/bin/make -C extern/filecoin-ffi/ .install-filcrypto go clean -cache -testcache go: unlinkat /Users/andy/Library/Caches/go-build/c5: directory not empty make[1]: *** [.install-filcrypto] Error 1 make: *** [build/.filecoin-install] Error 2

@LexLuthr Can you look into this?

Seems to be working for me and in CI. Do you have swag command installed? Maybe Go clean cache?

[snadrus]

Changes I will make today:

1. better docs: "*" allows everyone, it's best to specify the UI server's hostname.
2. rm from market server.