Commit Graph
44 Commits
Author SHA1 Message Date
ik fe9367b5e9 security: forbid inline style attributes 2026-09-13 15:17:00 +07:00
ik 14958be302 security: externalize astro scripts and styles 2026-09-13 15:14:21 +07:00
ik c93c6adc7a security: restrict production content origins
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / dependency-audit (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-13 09:33:39 +07:00
ik d4ded77355 ci: schedule isolated production bootstrap
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / dependency-audit (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-12 20:58:50 +07:00
ik f6e6211871 test: verify release schema upgrade 2026-09-12 20:57:58 +07:00
ik 049f1ef30a refactor: separate migrations from API runtime
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / dependency-audit (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-12 16:02:19 +07:00
ik 868278fdba security: restrict MinIO app to one bucket 2026-09-12 16:01:00 +07:00
ik 926182a6cf feat: add alpha load-test methodology 2026-09-12 15:58:07 +07:00
ik 966000b0b0 feat: transform catalogs into field atlas 2026-09-12 15:20:26 +07:00
ik 907ad537e2 fix: accept non-hex alembic revision ids
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / dependency-audit (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-11 07:58:40 +07:00
ik 6664f24f20 fix: invoke Caddy adapter correctly in bootstrap 2026-09-11 07:48:05 +07:00
ik d28ad31aca fix: fail closed on bootstrap migration inspection 2026-09-11 07:46:10 +07:00
ik d6bc5ce85c fix: alert on degraded community scheduler health
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / dependency-audit (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-11 07:44:30 +07:00
ik 42bdec6c2f fix: isolate scheduler validation in bootstrap 2026-09-11 07:43:14 +07:00
ik 486e4c4673 fix: wire report idempotency and bootstrap scheduler check 2026-09-11 07:41:55 +07:00
ik 2ba4f6027d A10: Add Caddy config validation and scheduler checks to bootstrap 2026-09-11 07:35:22 +07:00
ik 7386e7bea8 A10: Fix Alembic head extraction in bootstrap script
Bug: 'alembic heads' returns '48094a7d1b92 (head)', but DB query returns
only '48094a7d1b92'. String comparison failed due to '(head)' suffix.

Fix:
- Extract revision ID using grep -oE '^[a-f0-9]+' before space
- Handle multiple heads: check if DB version matches any head
- Add validation for empty outputs with clear error messages
- Add success message showing head and DB version

Verification:
- Script syntax: bash -n passes
- Handles single head (exact match)
- Handles multiple heads (DB version matches any)
2026-09-10 17:57:46 +07:00
ik 49027306d9 A10: Fix bootstrap to use dynamic Alembic head check
- Replace hardcoded '0013' with dynamic 'alembic heads' check
- Works with any current head revision
- Caddy adapt and scheduler checks already in place from previous fixes
- Bootstrap uses loopback ports and isolated compose profile
2026-09-10 06:13:00 +07:00
ik fc878c81d4 fix: R04 site cooldown uses full registry for disabled sources; R05 remove proxy/scheduler from bootstrap (#1788956171115) 2026-09-10 05:37:38 +07:00
ik a37f9c4696 fix: R01 Caddy body_limit → request_body max_size (Caddy 2.10.2 compat) (#1788956171115) 2026-09-09 20:35:36 +07:00
ik 63e33e1861 fix: audit P0-P1 — T03-T07, D01-D08, U01-U02 (#1788956171115) 2026-09-09 20:02:52 +07:00
ik c6fdc969c2 fix: separate admin page and API authentication
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-09 07:29:39 +07:00
ik eb501affb8 test: verify production proxy form routing 2026-09-09 07:27:52 +07:00
ik bb61d21dd6 sync
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-08 21:07:07 +07:00
ik 214b328cd2 perf: cache public activity aggregates 2026-09-07 18:54:58 +07:00
ik fa3b24fb1f feat: add safe diagnostics export 2026-09-07 18:49:53 +07:00
ik 6477681e41 ops: monitor database and object storage growth 2026-09-07 18:46:34 +07:00
ik 02b67741f8 feat: expose deployment build identity 2026-09-07 18:43:20 +07:00
ik 3529b6a1c8 feat: complete brand icon and static caching
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-07 16:59:44 +07:00
ik 0701383c28 feat: schedule authorized community imports 2026-09-07 16:45:49 +07:00
ik 7217356594 feat: enable safe community auto publishing 2026-09-07 13:00:58 +07:00
ik 16e4c071d1 docs: target an open alpha launch
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-07 09:27:11 +07:00
ik 2aa2d30750 feat: add production deployment preflight 2026-09-07 09:18:22 +07:00
ik 5e27a5b066 perf: stabilize list queries for pilot
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-07 08:02:37 +07:00
ik c45b4511b7 feat: serialize official record imports
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-07 07:54:07 +07:00
ik 687b4c9cb5 feat: harden production security boundaries 2026-09-07 07:51:25 +07:00
ik 2fa6b68279 feat: automate production maintenance 2026-09-07 07:44:11 +07:00
ik 6e60988ac9 docs: record rf4spotter deployment status
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-06 14:46:11 +07:00
ik e6653d4c77 feat: add production health monitoring 2026-09-06 14:44:38 +07:00
ik 2200336524 feat: add production data retention 2026-09-06 14:37:58 +07:00
ik 0f075469c8 test: verify clean production bootstrap 2026-09-06 14:34:05 +07:00
ik 66fb1625da feat: verify production backup restore 2026-09-06 14:24:26 +07:00
ik 870d9cc7f9 feat: harden production data and backups
CI / backend-and-migrations (push) Canceled after 0s
CI / astro-build (push) Canceled after 0s
CI / compose-e2e (push) Canceled after 0s
2026-09-06 14:08:07 +07:00
ik a4bd395856 feat: add production deployment for rf4spotter.ru 2026-09-06 13:52:30 +07:00