gendesign/docs
lekss361 f4d43d1cfc
All checks were successful
Deploy / changes (push) Successful in 5s
Deploy / deploy (push) Successful in 59s
Deploy / build-backend (push) Successful in 27s
Deploy / build-worker (push) Successful in 27s
Deploy / build-frontend (push) Successful in 25s
fix(security): forwarder PermissionError — убрать USER nobody + deploy automation (#432)
Hotfix для GlitchTip Issue #71 (PermissionError при чтении /var/log/caddy/gendsgn.ru.log).

Changes:
- ops/glitchtip-auth-forwarder/Dockerfile — убран USER nobody, форвардер под root
- ops/glitchtip-auth-forwarder/forwarder.py — throttle capture_exception (300s)
- .forgejo/workflows/deploy.yml — paths-filter + build + force-recreate sidecar
- docs/runbooks/basic_auth_management.md — Deploy section

Security: caddy_logs mount read-only, нет network listener, нет shell,
auth_forwarder_state dedicated volume. Attack surface минимален.

После merge deploy.yml автоматически rebuild+recreate sidecar на VPS.
2026-05-23 09:04:00 +00:00
..
runbooks fix(security): forwarder PermissionError — убрать USER nobody + deploy automation (#432) 2026-05-23 09:04:00 +00:00
MVP_Goals_Python.md Initial commit: Discovery MVP docs (v2.1 + v2.2) 2026-04-25 08:40:09 +03:00
obsidian-livesync.md feat(deploy): split obsidian stack from main + path-filtered GHA 2026-05-11 09:51:31 +03:00
PILOT_ACCESS.md feat(security): закрыть gendsgn.ru basic_auth gate (multi-user, 11 users) (#426) 2026-05-23 08:16:10 +00:00
Бизнес-план v2.1 - Site Finder + Roadmap 12 месяцев.md Initial commit: Discovery MVP docs (v2.1 + v2.2) 2026-04-25 08:40:09 +03:00