4 Commits

Include renames

Author	SHA1	Message	Date
clawbot	6df743f7fa	Page is sent with Cache-Control: no-cache (closes #141) ... nginx sent index.html with no Cache-Control, so a browser could keep it after a deploy and ask for hashed assets the new build no longer has, and show an empty page. location / now adds Cache-Control: no-cache, which covers its try_files fallback to /index.html, and includes security-headers.conf again, since its own add_header drops the server's. /assets/ and the paths passed to the backend are unchanged. script/frontend-viewport-test fails unless / and a path that falls back to the page carry Cache-Control: no-cache and Content-Security-Policy, which comes from the same file as the other security headers. Model: opus-5-5	2026-10-19 03:10:39 +02:00
clawbot	2532da55e9	Client address is the right-most untrusted X-Forwarded-For entry (closes #144) ... From a peer in TRUSTED_PROXIES, clientIP took the left-most X-Forwarded-For entry, which the client writes itself behind a proxy that appends to the header, so a client could choose the address the rate limit counts. It now walks the entries from the right past trusted proxies and takes the first that is not one. An entry with a port is read as its address; with only trusted entries, or one that is not an address at all, it uses the peer. Every X-Forwarded-For header line is read, and X-Real-IP only when there is no X-Forwarded-For entry. Model: opus-5-5	2026-10-19 00:28:18 +02:00
clawbot	cbcde098dc	Unset TRUSTED_PROXIES trusts the RFC 1918 ranges (closes #119) ... With TRUSTED_PROXIES unset, bin/entrypoint.sh gives nginx one set_real_ip_from line for each of 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16, as sneak ruled on 2026-09-22 for every app. A list replaces them, and set and empty trusts no proxy; each entry is checked as before. The backend inside the container still trusts only 127.0.0.1/32. README.md, configs/nginx.conf and the comment in script/frontend-viewport-test say the new default. Model: opus-5-5	2026-10-14 13:01:34 +02:00
clawbot	406e073aee	Move to the layout REPO_POLICIES.md gives (closes #30) ... The Go module moves from backend/ to the root (go.mod, go.sum, .golangci.yml, cmd/, internal/), the page's source to web/, and nginx's two files to configs/. backend/ is gone: its LICENSE and .dockerignore are deleted, and its .gitignore entries, README and scripts are folded into the root ones. script/build builds the server binary after the frontend; script/run and script/clean move up from backend/script/; make test, lint, fmt and fmt-check do what the backend's did. Vite's root is web/ and it still builds into dist/. go.mod ignores node_modules/, whose npm packages can ship .go files. script/bootstrap no longer installs gcc, which only the host Go tests needed. Model: opus-5-5	2026-10-14 12:01:32 +02:00