6 Commits

Include renames

Author	SHA1	Message	Date
user	fff7789dfb	fix: update Dockerfile to Go 1.25.4 and resolve gosec lint findings ... - Update Dockerfile base image from golang:1.24-alpine to golang:1.25.4-alpine (pinned by sha256 digest) to match go.mod requirement of go >= 1.25.4 - Fix gosec G703 (path traversal) false positives by adding filepath.Clean() at call sites with nolint annotations for internally-constructed paths - Fix gosec G704 (SSRF) false positive with nolint annotation; URL is already validated by validateURL() which checks scheme, resolves DNS, and blocks private IPs - All make check passes clean (lint + tests)	2026-02-25 05:44:43 -08:00
sneak	d0fe5e7334	chore: pin Docker images by hash and run make check in build	2026-02-25 19:47:14 +07:00
sneak	02dedd433b	Require signing_key at startup, add default config ... - Add config validation: signing_key required, minimum 32 characters - Server now fails to start without valid signing_key (no more runtime errors) - Add config.example.yml with default whitelist hosts - Copy config to /etc/pixa/config.yml in Docker image - Update entrypoint to use --config /etc/pixa/config.yml - Add config.dev.yml for local Docker development - Mount dev config in make devserver	2026-01-08 15:48:37 -08:00
sneak	d2e2e319be	Create /var/lib/pixa directory in Docker image for database/cache ... - Change default StateDir from ./data to /var/lib/pixa (proper Unix convention) - Create directory owned by pixad user in Dockerfile - Set WORKDIR to /var/lib/pixa	2026-01-08 15:37:25 -08:00
sneak	78f844fca5	Switch to govips for native CGO image processing ... - Replace gen2brain/avif, gen2brain/webp, disintegration/imaging with govips - govips uses libvips via CGO for fast native image processing - Add libheif-dev to Dockerfile for AVIF support - Add docker-test Makefile target for running tests in Docker - Update processor.go to use vips API for decode, resize, encode - Add TestMain to initialize/shutdown vips in tests - Remove WASM-based libraries (gen2brain) in favor of native codecs Performance improvement: AVIF encoding now uses native libheif instead of WASM, significantly reducing encoding time for large images.	2026-01-08 15:16:34 -08:00
sneak	4b2d85010e	Add two-stage Dockerfile with CGO support ... - Build stage: golang:1.24-alpine with vips-dev for CGO image libs - Runtime stage: alpine:3.21 with vips runtime only - Pass VERSION build arg for ldflags embedding - Add 'make docker' target to build image with git version	2026-01-08 15:05:49 -08:00