 smileBeda
|
2a5dfc3713
|
flush
|
2026-03-02 17:57:59 -03:00 |
|
|
smileBeda
|
1cd7d6541d
|
update dockerfile
|
2026-03-02 17:53:26 -03:00 |
|
|
smileBeda
|
ec6a20ebd1
|
Stabilize auth cookies for proxied split-domain deployments
|
2026-03-02 17:50:16 -03:00 |
|
|
smileBeda
|
83d6a4f367
|
Remove frontend npm tuning and keep standard install path
|
2026-03-02 17:31:34 -03:00 |
|
|
smileBeda
|
8cf3748015
|
Revert "Harden frontend npm install against transient registry timeouts"
This reverts commit daa11cb768.
|
2026-03-02 16:58:01 -03:00 |
|
|
smileBeda
|
daa11cb768
|
Harden frontend npm install against transient registry timeouts
|
2026-03-02 16:57:25 -03:00 |
|
|
smileBeda
|
8f2c357bfc
|
Run production frontend Nginx unprivileged under dropped caps
|
2026-03-02 16:41:20 -03:00 |
|
|
smileBeda
|
d50169b883
|
Serve production frontend via Nginx static build
|
2026-03-02 15:50:34 -03:00 |
|
|
smileBeda
|
b5b74845f2
|
Switch frontend container to production-aware runtime mode
|
2026-03-02 15:41:39 -03:00 |
|
|
smileBeda
|
0acce2e260
|
Wire Vite allowed hosts to env for Docker frontend
|
2026-03-02 15:37:39 -03:00 |
|
|
smileBeda
|
b86223f943
|
update docker compose
|
2026-03-02 15:24:21 -03:00 |
|
|
smileBeda
|
8dc4013e76
|
update docker compose
|
2026-03-02 15:18:12 -03:00 |
|
|
smileBeda
|
668c22f692
|
update docker compose
|
2026-03-02 15:16:14 -03:00 |
|
|
smileBeda
|
89ec3584f9
|
update docker-compose.yml
|
2026-03-02 15:03:45 -03:00 |
|
|
smileBeda
|
8dded6383e
|
Use node 22 slim for frontend npm network compatibility
|
2026-03-02 15:00:02 -03:00 |
|
|
smileBeda
|
c47fc48533
|
Harden frontend Docker npm fetch resilience
|
2026-03-02 14:38:26 -03:00 |
|
|
smileBeda
|
b6d470590e
|
Update docker compose
|
2026-03-02 14:26:52 -03:00 |
|
|
smileBeda
|
41bbe87b4c
|
Update changelog
|
2026-03-02 13:41:16 -03:00 |
|
|
smileBeda
|
6fba581865
|
Rewrite README for end-user Docker setup and env guidance
|
2026-03-02 13:40:29 -03:00 |
|
|
smileBeda
|
4b34d6153c
|
Remove report
|
2026-03-01 21:55:53 -03:00 |
|
|
smileBeda
|
700f0d6d79
|
Use version-safe FastAPI CSRF dependency params
|
2026-03-01 21:44:59 -03:00 |
|
|
smileBeda
|
3cccf2e0e8
|
Fix auth route response injection crash
|
2026-03-01 21:43:09 -03:00 |
|
|
smileBeda
|
26eae1a09b
|
Fix auth session persistence with HttpOnly cookies and CSRF
|
2026-03-01 21:39:22 -03:00 |
|
|
smileBeda
|
a9333ec973
|
Harden frontend auth token handling in runtime memory
|
2026-03-01 21:29:11 -03:00 |
|
|
smileBeda
|
8eaaa01186
|
update report
|
2026-03-01 21:25:37 -03:00 |
|
|
smileBeda
|
eae7afd36e
|
docs: refresh production security assessment report
|
2026-03-01 21:22:25 -03:00 |
|
|
smileBeda
|
874597e40b
|
Fix predefined catalog visibility and port security must-know guidance
|
2026-03-01 21:15:12 -03:00 |
|
|
smileBeda
|
32b4589b28
|
docs: update security production readiness report
|
2026-03-01 21:07:49 -03:00 |
|
|
smileBeda
|
4c27fd6483
|
Harden auth login against brute-force and refresh security docs
|
2026-03-01 18:24:26 -03:00 |
|
|
smileBeda
|
9cbbd80f47
|
update report
|
2026-03-01 18:15:14 -03:00 |
|
|
smileBeda
|
aba320b617
|
docs: refresh security production readiness report
|
2026-03-01 18:03:45 -03:00 |
|
|
smileBeda
|
74d91eb4b1
|
Update header styles
|
2026-03-01 17:55:51 -03:00 |
|
|
smileBeda
|
1c57084ebf
|
Hardcode CORS credentials disabled and remove env toggle
|
2026-03-01 17:16:13 -03:00 |
|
|
smileBeda
|
bfc89fe5ce
|
Revert "Allow private-network CORS origins in development"
This reverts commit 1b2e0cb8af.
|
2026-03-01 17:12:06 -03:00 |
|
|
smileBeda
|
1b2e0cb8af
|
Allow private-network CORS origins in development
|
2026-03-01 17:08:50 -03:00 |
|
|
smileBeda
|
0242e061c2
|
Harden auth and security controls with session auth and docs
|
2026-03-01 15:29:09 -03:00 |
|
|
smileBeda
|
7a19f22f41
|
Replace REPORT.md with production security readiness assessment
|
2026-03-01 14:56:26 -03:00 |
|
|
smileBeda
|
c5423fc9c3
|
Stabilize API routing, CORS, and settings save behavior
|
2026-03-01 14:27:19 -03:00 |
|
|
smileBeda
|
3d280396ae
|
Fix LAN API access and dev proxy routing
|
2026-03-01 14:08:48 -03:00 |
|
|
smileBeda
|
48cfc79b5f
|
Fix LAN API base and development CORS regression
|
2026-03-01 13:56:25 -03:00 |
|
|
smileBeda
|
bdd97d1c62
|
Harden security controls from REPORT findings
|
2026-03-01 13:32:08 -03:00 |
|
|
smileBeda
|
da5cbc2c01
|
Update Report
|
2026-03-01 12:42:52 -03:00 |
|
|
smileBeda
|
652d7e8f25
|
docs: update security production readiness report
|
2026-03-01 12:35:57 -03:00 |
|
|
smileBeda
|
c3f34b38b4
|
Fix authenticated media flows and upload preflight handling
|
2026-02-21 15:53:02 -03:00 |
|
|
smileBeda
|
1cb6bfee58
|
Harden settings read sanitization for invalid providers
|
2026-02-21 15:15:43 -03:00 |
|
|
smileBeda
|
a69702f099
|
chore: remove generated tsbuildinfo artifact
|
2026-02-21 15:03:24 -03:00 |
|
|
smileBeda
|
c1a7011d71
|
frontend: apply bearer token to centralized API requests
|
2026-02-21 15:03:13 -03:00 |
|
|
smileBeda
|
b25e508a00
|
Fix frontend container app dir ownership for Vite
|
2026-02-21 14:49:23 -03:00 |
|
|
smileBeda
|
74a6551237
|
Redact quoted JSON secret tokens in processing logs
|
2026-02-21 13:57:23 -03:00 |
|
|
smileBeda
|
3cbad053cc
|
Harden auth, redaction, upload size checks, and compose token requirements
|
2026-02-21 13:48:55 -03:00 |
|