5 Commits

Include renames

Author	SHA1	Message	Date
maro	f1cd07b3ad	CI/CD: build the Docker image once on main, promote it on release tags ... Previously release.yml fully rebuilt and re-ran lint/typecheck/test/build from source on every tag push, duplicating what ci.yml had already just verified on main. Now ci.yml builds and pushes the image (tagged by commit SHA) once, right after its checks pass, but only for pushes to main. release.yml no longer builds anything: it pulls that exact image, retags it as the release version + latest, and deploys it. This guarantees the deployed image is byte-for-byte what CI verified, and turns "tag a commit that was never pushed to main or hasn't finished CI" into a loud, immediate failure (no image to promote) instead of a rebuild that silently skips the checks.	2026-09-06 22:24:07 +02:00
maro	82c4261a81	Fix security and correctness issues found in full-codebase audit ... - Restrict meetingPassword field so it isn't leaked via the public REST/GraphQL API - Fix booking slot computation to use Europe/Berlin time instead of the server's UTC clock - Reset email verification when a customer changes their email address - Fix ICS calendar injection via unescaped carriage returns in event descriptions - Bind WebRTC meeting kicks to a persistent client id so they survive a rejoin - Move the meeting signaling token out of the WebSocket query string into the first message - Prevent duplicate signaling connections from leaking when the same participant reconnects - Use the rightmost X-Forwarded-For entry for rate limiting (single trusted reverse proxy) - Use constant-time comparison for the cron endpoint's bearer token - Remove SVG from allowed Media upload types (stored-XSS risk, unused anyway) - Add baseline security headers and a CSP to next.config.ts - Fix CI/CD script injection via unsanitized git ref names in release.yml	2026-09-06 21:59:39 +02:00
maroandClaude Sonnet 5	27aa625c0e	Fix CI: run next typegen before tsc so route-aware types resolve ... This Next.js version generates LayoutProps/PageProps/RouteContext into .next/types only via `next dev`, `next build`, or `next typegen` (see node_modules/next/dist/docs .../06-cli/next.md). Typecheck ran `tsc --noEmit` standalone before Build, so those globals didn't exist yet, failing with "Cannot find name 'LayoutProps'". Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-25 23:46:32 +02:00
maroandClaude Sonnet 5	bd38781502	Fix CI: scope NODE_ENV=production to the build step only ... Setting it job-wide made `npm ci` treat NODE_ENV=production as an implicit --omit=dev, silently skipping eslint/typescript/test devDependencies and failing Lint with "eslint: not found". Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-25 23:43:12 +02:00
maroandClaude Sonnet 5	56b2a6497b	Overhaul deployment to Gitea Actions CI/CD, remove update.sh ... Production no longer builds from source or self-updates via cron/git pull: setup.sh now only provisions the server once (Docker, /opt/anouma, a restricted `anouma-deploy` SSH user whose key can only ever run deploy.sh, generated secrets). All future deployments run through .gitea/workflows/ci.yml (lint/typecheck/test/build on every push) and release.yml (on a vX.Y.Z tag: build the image, push it to the Gitea registry, then SSH-trigger deploy.sh on the server), which pulls, migrates, restarts, healthchecks, backs up the database first, and automatically rolls back the code on a failed healthcheck. docker-compose.yml's app service now runs a registry image (${ANOUMA_IMAGE}) instead of building locally. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-25 22:58:09 +02:00