yolkbook

Files

derekc 392a48dfb9 Go-live hardening: server_tokens, resource limits, pinned images, CVE fixes

- Add server_tokens off to nginx (suppress version leakage)
- Add deploy.resources.limits to all containers (db: 512M, api: 256M, nginx: 64M)
- Pin image tags: mysql:8.0 → 8.0.45, nginx:alpine → 1.29.6-alpine
- Fix CVEs: cryptography 43.0.3 → 46.0.5 (HIGH), python-jose 3.3.0 → 3.4.0 (CRITICAL)
- Add .limit(500) to GET /api/flock and GET /api/admin/users

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-20 00:16:28 -07:00

__init__.py

Initial commit

2026-02-26 22:27:58 -08:00

admin.py

Go-live hardening: server_tokens, resource limits, pinned images, CVE fixes

2026-03-20 00:16:28 -07:00

auth_router.py

Move JWT from localStorage to HttpOnly cookie; fix CSRF

2026-03-19 23:57:22 -07:00

eggs.py

Implement performance improvements across backend and frontend