12 Commits

Include renames

Author	SHA1	Message	Date
clawbot	85729d9181	fix: update Dockerfile to Go 1.25.4 and resolve gosec lint findings ... - Update Dockerfile base image from golang:1.24-alpine to golang:1.25.4-alpine (pinned by sha256 digest) to match go.mod requirement of go >= 1.25.4 - Fix gosec G703 (path traversal) false positives by adding filepath.Clean() at call sites with nolint annotations for internally-constructed paths - Fix gosec G704 (SSRF) false positive with nolint annotation; URL is already validated by validateURL() which checks scheme, resolves DNS, and blocks private IPs - All make check passes clean (lint + tests)	2026-02-25 05:44:49 -08:00
sneak	02dedd433b	Require signing_key at startup, add default config ... - Add config validation: signing_key required, minimum 32 characters - Server now fails to start without valid signing_key (no more runtime errors) - Add config.example.yml with default whitelist hosts - Copy config to /etc/pixa/config.yml in Docker image - Update entrypoint to use --config /etc/pixa/config.yml - Add config.dev.yml for local Docker development - Mount dev config in make devserver	2026-01-08 15:48:37 -08:00
sneak	d2e2e319be	Create /var/lib/pixa directory in Docker image for database/cache ... - Change default StateDir from ./data to /var/lib/pixa (proper Unix convention) - Create directory owned by pixad user in Dockerfile - Set WORKDIR to /var/lib/pixa	2026-01-08 15:37:25 -08:00
sneak	f244d9c7e0	Add per-host connection limits for upstream fetching ... - Add upstream_connections_per_host config option (default: 20) - Implement per-host semaphores to limit concurrent connections - Semaphore released when response body is closed - Prevents overwhelming origin servers with parallel requests	2026-01-08 05:19:20 -08:00
sneak	6a20406b0f	Add -config flag using cobra to specify config file path	2026-01-08 04:58:05 -08:00
sneak	9647829ac9	Support YAML list format for whitelist_hosts config	2026-01-08 04:08:51 -08:00
sneak	3fcf9d9146	Add failing test for YAML list format in whitelist_hosts config	2026-01-08 04:08:11 -08:00
sneak	fd2d108f9c	Wire up image handler endpoint with service orchestration ... - Add image proxy config options (signing_key, whitelist_hosts, allow_http) - Create Service to orchestrate cache, fetcher, and processor - Initialize image service in handlers OnStart hook - Implement HandleImage with URL parsing, signature validation, cache - Implement HandleRobotsTxt for search engine prevention - Parse query params for signature, quality, and fit mode	2026-01-08 04:01:53 -08:00
sneak	29adb6ee47	Rename unused parameters to _ to satisfy linter	2026-01-08 02:27:45 -08:00
sneak	d95d31df25	Rename ConfigParams to Params to avoid stuttering	2026-01-08 02:24:20 -08:00
sneak	ce25ea8f6f	Define DefaultPort and DefaultStateDir constants	2026-01-08 02:21:00 -08:00
sneak	516853626d	Add basic webserver skeleton with healthcheck	2026-01-08 02:20:23 -08:00