Juan Denis 2dee9fa891 Pass DB passwords via env, not the command line ...

docker exec -e MYSQL_PWD=<pw>, mysqldump -p<pw> and friends put the
root DB password in argv, readable by every local account through ps
or /proc. Add secret_env() and hand the password to the child's
environment (bare -e NAME for docker exec), and drop it from the
mysqladmin readiness ping, which never needed it.

2026-10-26 00:56:42 -04:00

..

__init__.py

Implement security features: key rotation, IP allowlist, anomaly detection

2026-01-22 18:11:22 -05:00

actor.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

background_loop.py

Remove internal plan citations from app code

2026-10-10 15:50:45 -04:00

backup_crypto.py

feat(backups): client-side encryption (opt-in, reuses the Fernet key)

2026-06-19 13:22:43 -04:00

client_ip.py

feat(security): trust reverse-proxy client IP via one gated seam

2026-07-18 00:51:21 -04:00

config_store.py

Write cron and storage settings atomically

2026-10-26 00:53:25 -04:00

crypto.py

fix(system): version resolution honors custom install dirs and Docker

2026-07-02 22:14:37 -04:00

domain.py

feat: canonical domain + encryption key bootstrap

2026-06-19 01:34:02 -04:00

env.py

Remove internal plan citations from app code

2026-10-10 15:50:45 -04:00

formatting.py

Remove internal plan citations from app code

2026-10-10 15:50:45 -04:00

git_security.py

fix(security): close git argument injection in repo_url/app_path/branch (GHSA-8vx6-432p-h62q)

2026-08-11 19:43:46 -04:00

i18n.py

Remove internal plan citations from app code

2026-10-10 15:50:45 -04:00

ingress.py

feat: make the ingress-plane boundary explicit (host Nginx vs proxy stack)

2026-06-23 20:57:40 -04:00

ip_utils.py

Delete nine backend functions with no callers

2026-10-10 16:09:29 -04:00

remote_index.py

Remove internal plan citations from app code

2026-10-10 15:50:45 -04:00

safe_http.py

Refuse internal targets for user-set webhook URLs

2026-10-10 06:52:32 -04:00

sdk.py

Remove internal plan citations from app code

2026-10-10 15:50:45 -04:00

sensitive_data_filter.py

Remove internal plan citations from app code

2026-10-10 15:50:45 -04:00

slug.py

Remove internal plan citations from app code

2026-10-10 15:50:45 -04:00

system.py

Pass DB passwords via env, not the command line

2026-10-26 00:56:42 -04:00

version.py

feat(files): Stack quick link follows the real install dir

2026-07-02 22:19:14 -04:00