sneak 74ba64235c The image apps build FROM, with its health check (closes #45) ...

The Dockerfile's last stage is now the image of "Deployment" in SPEC.md:
Ubuntu 26.04 with ca-certificates, nix-bin and runit from a dated
snapshot whose InRelease files are checked by hash, nixpkgs from its
release file checked by SHA-256, runsvinit built at a fixed commit, and
smallwebwaf as a runit service. smallwebwaf answers
/_smallwebwaf/healthz, and `smallwebwaf healthcheck` is the image's
HEALTHCHECK. script/example-app builds an app on the image and checks
it end to end.

The Nix profile comes last on the PATH: first, busybox from nixpkgs
replaced runit's own runsvdir and sv. SPEC.md is corrected to match
what was built.

Model: opus-5-5

2026-10-04 07:07:24 +00:00

..

bodies.go

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

client_test.go

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

client.go

Per-client request rate limits over a minute, an hour and a day (closes #43)

2026-10-04 04:24:34 +02:00

countries_test.go

Country allow and deny lists, looked up through GeoJS (closes #44)

2026-10-04 08:29:41 +02:00

countries.go

Country allow and deny lists, looked up through GeoJS (closes #44)

2026-10-04 08:29:41 +02:00

health_test.go

The image apps build FROM, with its health check (closes #45)

2026-10-04 07:07:24 +00:00

limits_test.go

Pass-through proxy with timeouts, size limits and a request log (closes #13)

2026-10-03 17:24:34 +02:00

passthrough_test.go

Proxy timing tests outlast a hold-up of the test process (closes #53)

2026-10-04 07:53:18 +02:00

proxy_test.go

Country allow and deny lists, looked up through GeoJS (closes #44)

2026-10-04 08:29:41 +02:00

proxy.go

The image apps build FROM, with its health check (closes #45)

2026-10-04 07:07:24 +00:00

ratelimits_test.go

Per-client request rate limits over a minute, an hour and a day (closes #43)

2026-10-04 04:24:34 +02:00

request.go

Country allow and deny lists, looked up through GeoJS (closes #44)

2026-10-04 08:29:41 +02:00

timeouts_test.go

TestRequestTimeouts expects 504 when none of the body reached the app (closes #49)

2026-10-04 06:09:22 +02:00