8 Commits

Include renames

Author	SHA1	Message	Date
sneak	95c6ec16b4	fix(backend): report ingest correctness — propagate storage failure, 413 on oversize, global body cap (closes #23) ... A buffer failure on POST /api/v1/reports now returns 500 instead of a false {"status":"ok"}, so clients can retry. Decode errors are split: an over-limit body returns 413 (via errors.As on *http.MaxBytesError), malformed JSON stays 400. A new MaxBodyBytes middleware caps every route (1 MiB default; rejects an oversized Content-Length up-front and caps the read otherwise), replacing the per-route reader so the health check and future routes are bounded too. The raw attacker-controlled geo blob is no longer logged — only its byte length — and client_id and timestamp are length-bounded before logging. A decodeJSON handler helper is added per the HTTP server conventions. Panic recovery is now a local middleware that routes the stack through slog as structured JSON rather than chi's plain-text stderr. Error bodies still leak nothing internal. Chosen failure code for a storage failure: 500, since a full buffer or write error is server-side and retryable, not the client's fault. Model: opus-4-8	2026-09-21 13:17:59 +00:00
clawbot	f3895789d2	feat(backend): server hardening: timeouts, security headers, trusted-proxy client IP (closes #19) ... Add ReadHeaderTimeout and IdleTimeout to the http.Server as named constants beside the existing timeouts. Add a SecurityHeaders middleware (HSTS, a JSON-API CSP of default-src 'none'; frame-ancestors 'none', X-Frame-Options DENY, nosniff, Referrer-Policy, Permissions-Policy), registered before CORS so preflight responses carry it. Resolve the client IP from X-Forwarded-For / X-Real-IP only when the direct peer is in the trusted-proxy allowlist (loopback plus RFC1918 by default, configurable via TRUSTED_PROXIES); an untrusted peer's forwarded headers are ignored. Uses net/netip; no new dependency. Model: opus-4-8 (implementation and review); claude-fable-5 (merge)	2026-09-21 15:05:25 +02:00
clawbot	25a852d35c	build: Dockerfile.backend multistage lint stage (closes #17)	2026-08-10 16:04:48 +02:00
clawbot	a644efe9ff	chore: root .editorconfig and hardened .gitignore (closes #15)	2026-08-10 15:47:49 +02:00
sneak	8ca57746df	Move backend Dockerfile to repo root for git access ... Place the backend Dockerfile at repo root as Dockerfile.backend so the build context includes .git, giving git describe access for version stamping. Fix .gitignore pattern to anchor /netwatch-server so it does not exclude cmd/netwatch-server/. Remove .git from .dockerignore. Update CI workflow and backend Makefile docker target.	2026-02-27 12:45:38 +07:00
sneak	c61c047cd8	Fix backend Dockerfile: use Go 1.25, install golangci-lint ... Update base image from golang:1.24-alpine to golang:1.25-alpine to match go.mod requirement. Install golangci-lint by pinned commit hash so make check passes inside the container. Update runtime image to alpine:3.23.	2026-02-27 12:24:49 +07:00
sneak	4ad2573532	Add CI workflow and backend repo standard files ... Add .gitea/workflows/check.yml that builds both the root and backend Docker images on push. Add LICENSE and README.md to the backend subproject to match repo standards.	2026-02-27 12:18:35 +07:00
sneak	b57afeddbd	Add backend with buffered zstd-compressed report storage ... Introduce the Go backend (netwatch-server) with an HTTP API that accepts telemetry reports and persists them as zstd-compressed JSONL files. Reports are buffered in memory and flushed to disk when the buffer reaches 10 MiB or every 60 seconds.	2026-02-27 12:14:34 +07:00