15 Commits

Include renames

Author	SHA1	Message	Date
ik	86ed3a966a	security: enforce nonce based content policy	2026-09-13 16:38:47 +07:00
ik	049f1ef30a	refactor: separate migrations from API runtime	2026-09-12 16:02:19 +07:00
ik	868278fdba	security: restrict MinIO app to one bucket	2026-09-12 16:01:00 +07:00
ik	e2bed0db89	R13: Fix X-Forwarded-For trust boundary — only trust from known proxies ... - Add _is_trusted_proxy() to check client IP against trusted CIDRs - Only use X-Forwarded-For if connection came from trusted proxy - Add TRUSTED_PROXY_CIDRS config (default: 127.0.0.1/32, ::1/128) - Add parse_comma_separated_lists for env var parsing - Add 3 unit tests: trusted CIDR check, untrusted ignores forwarded, trusted uses forwarded	2026-09-10 05:49:23 +07:00
ik	63e33e1861	fix: audit P0-P1 — T03-T07, D01-D08, U01-U02 (#1788956171115)	2026-09-09 20:02:52 +07:00
ik	214b328cd2	perf: cache public activity aggregates	2026-09-07 18:54:58 +07:00
ik	02b67741f8	feat: expose deployment build identity	2026-09-07 18:43:20 +07:00
ik	0701383c28	feat: schedule authorized community imports	2026-09-07 16:45:49 +07:00
ik	687b4c9cb5	feat: harden production security boundaries	2026-09-07 07:51:25 +07:00
ik	2fa6b68279	feat: automate production maintenance	2026-09-07 07:44:11 +07:00
ik	2200336524	feat: add production data retention	2026-09-06 14:37:58 +07:00
ik	0f075469c8	test: verify clean production bootstrap	2026-09-06 14:34:05 +07:00
ik	66fb1625da	feat: verify production backup restore	2026-09-06 14:24:26 +07:00
ik	870d9cc7f9	feat: harden production data and backups	2026-09-06 14:08:07 +07:00
ik	a4bd395856	feat: add production deployment for rf4spotter.ru	2026-09-06 13:52:30 +07:00