Juan Denis 90c8fb0eac Close the bundled Gitea to the internet and signups ...

Same fix as the registry's template: Gitea 1.21 was reachable on
every interface with open registration, and a panel's Gitea was
exploited to mine Monero. Bind the web port to 127.0.0.1 behind the
panel's /gitea proxy, disable signups and move to Gitea 1.27.

2026-10-11 17:57:55 -04:00

..

app

Feature templates the registry marks as featured

2026-10-11 16:41:38 -04:00

migrations

Drop the retired workflow-schedules job

2026-10-10 13:12:09 -04:00

serverkit_installer

fix(distro): patch all 6 failing distro-compatibility probes

2026-08-28 23:31:36 -04:00

templates

Close the bundled Gitea to the internet and signups

2026-10-11 17:57:55 -04:00

tests

Feature templates the registry marks as featured

2026-10-11 16:41:38 -04:00

_dbcheck.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00

.bandit

…

.dockerignore

…

.env.example

docs(env): document the ALLOW_* security opt-ins and demo/staging flags

2026-08-19 10:10:59 -04:00

.gitignore

…

.test_durations

test: record per-test durations so CI shards balance by time, not count

2026-08-06 03:25:21 -04:00

cli.py

Keep CLI commands from starting the daemons

2026-10-10 13:03:37 -04:00

config.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

requirements.txt

Drop the unused apispec-webframeworks dependency

2026-10-10 18:34:42 -04:00

run.py

Drop gevent and the stale backend Dockerfile

2026-10-10 13:40:55 -04:00

serverkit_cron_run.py

feat(cron): completion — run history, project scope, cwd/run-as (plan 34)

2026-07-07 20:29:29 -04:00

smoke_sandbox.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00