From 256dca9c374732cc4fb47fd49fa43deee3bfe98a Mon Sep 17 00:00:00 2001
From: monjiapawne <187591672+monjiapawne@users.noreply.github.com>
Date: Wed, 28 Oct 2026 20:59:40 -0400
Subject: [PATCH 1/3] add new config to template and bump

---
 guard/config.json | 4 ++++
 template.env      | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/guard/config.json b/guard/config.json
index 8c0ea840..5a845fe3 100644
--- a/guard/config.json
+++ b/guard/config.json
@@ -17,6 +17,8 @@
             "port": 443,
             "compartment_id": "compartment_1",
             "affiliation": "internal",
+            "allow_sync_auth_key_refresh": false,
+            "allow_sightings": false,
             "taxonomies_rules": {
                 "required_taxonomies": [],
                 "allowed_tags": {},
@@ -36,6 +38,8 @@
             "port": 443,
             "compartment_id": "compartment_1",
             "affiliation": "partner",
+            "allow_sync_auth_key_refresh": false,
+            "allow_sightings": false,
             "taxonomies_rules": {
                 "required_taxonomies": [],
                 "allowed_tags": {
diff --git a/template.env b/template.env
index 66c3c521..3b38f9ea 100644
--- a/template.env
+++ b/template.env
@@ -6,7 +6,7 @@ CORE_TAG=v2.5.50
 # CORE_FLAVOR=standard
 MODULES_TAG=v3.1.1
 # MODULES_FLAVOR=standard
-GUARD_TAG=v1.3
+GUARD_TAG=v1.4
 
 # Build variables
 # PHP_API_VERSION=20240924

From dab7a6e189f661a867b80c3f317f302c6bc0e6a7 Mon Sep 17 00:00:00 2001
From: monjiapawne <187591672+monjiapawne@users.noreply.github.com>
Date: Wed, 28 Oct 2026 21:08:37 -0400
Subject: [PATCH 2/3] update readme

---
 README.md | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/README.md b/README.md
index 37c9ff01..a0e7897c 100644
--- a/README.md
+++ b/README.md
@@ -183,6 +183,18 @@ The following format is required to target the misp-core, the IP is replaced wit
 docker compose restart misp-guard
 ```
 
+> [!IMPORTANT]
+> **misp-guard v1.4+:** sightings sync is blocked by default. To allow it:
+>
+> ```jsonc
+> "partner_example": {
+>   // true = allow sightings sync with this partner (push and pull)
+>   "allow_sightings": true,
+>   // true = allow the sync user's API key on this partner to be refreshed
+>   "allow_sync_auth_key_refresh": true
+> }
+> ```
+
 #### Environment Variables
 
 ```bash

From 0d584bdf37d0dac06dcf7a55a0d517495c466721 Mon Sep 17 00:00:00 2001
From: monjiapawne <187591672+monjiapawne@users.noreply.github.com>
Date: Wed, 28 Oct 2026 21:10:29 -0400
Subject: [PATCH 3/3] switch to note md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index a0e7897c..66453feb 100644
--- a/README.md
+++ b/README.md
@@ -183,7 +183,7 @@ The following format is required to target the misp-core, the IP is replaced wit
 docker compose restart misp-guard
 ```
 
-> [!IMPORTANT]
+> [!NOTE]
 > **misp-guard v1.4+:** sightings sync is blocked by default. To allow it:
 >
 > ```jsonc