gendesign

Author	SHA1	Message	Date
Light1YT	6883d14177	fix(ops): repair broken main-DB backup + harden auth scripts/docs (#71 #427 #429 #428 ) Some checks failed CI / changes (push) Successful in 7s Details CI / backend-tests (push) Has been skipped Details CI / frontend-tests (push) Has been skipped Details CI / changes (pull_request) Successful in 6s Details CI / backend-tests (pull_request) Has been skipped Details CI / frontend-tests (pull_request) Has been skipped Details Deploy / build-backend (push) Blocked by required conditions Details Deploy / build-worker (push) Blocked by required conditions Details Deploy / build-frontend (push) Blocked by required conditions Details Deploy / deploy (push) Blocked by required conditions Details Deploy / changes (push) Has been cancelled Details #71 (CRITICAL): backup.sh committed 100644 → git reset --hard on deploy re-asserts non-exec mode → raw-path cron fails Permission denied (last good dump 2026-05-27, no S3). Commit 100755 + chmod ops/*.sh in deploy.yml + size sanity-check (never prune good dumps for a truncated one) + keep-N retention + optional S3 (redacted /etc/default template). Modeled on the working backup-tradein-db.sh. #427: widen basic_auth username regex ^[a-z][a-z0-9_.-]{1,62}$ + literal-escape dotted names in grep probes. #429: replace list_users.sh false-positive grep with anchored awk over basic_auth block. #428: PILOT_ACCESS.md support email → pilot@gendsgn.ru. Closes #71 Closes #427 Closes #429 Closes #428	2026-06-13 20:13:04 +05:00
lekss361	cc2d148967	feat(security): закрыть gendsgn.ru basic_auth gate (multi-user, 11 users) (#426 ) All checks were successful Deploy / changes (push) Successful in 5s Details Deploy / build-worker (push) Successful in 30s Details Deploy / build-frontend (push) Successful in 28s Details Deploy / build-backend (push) Successful in 31s Details Deploy / deploy (push) Successful in 53s Details Pilot demo 28.05.2026: closed gendsgn.ru/* (включая trade-in/) basic_auth gate. /health и /preview/* остаются public через route { } wrapper (Caddy 2.x directive ordering fix). 11 users (admin + user1..user10), bcrypt cost=14, snippet в git (audit trail). Scripts: scripts/auth/{add,remove,list}_user.sh. Fixup PR #426 (route{} wrap + log rotation + base64 busybox-compat + runbook audit log fix).	2026-05-23 08:16:10 +00:00

2 commits