nas-tools

Author	SHA1	Message	Date
Gan, Jimmy	6c08fc007a	fix: configure npm registry mirror (npmmirror) in CI workflows Deploy Dashboard (Dev) / Backend Tests (push) Successful in 20m13s Details Deploy Dashboard (Dev) / Frontend Tests (push) Successful in 52s Details Run Tests / Secret Detection (pull_request) Successful in 2m42s Details Run Tests / Backend Tests (pull_request) Successful in 35m32s Details Run Tests / Frontend Tests (pull_request) Failing after 47s Details Deploy Dashboard (Dev) / Deploy to Dev (push) Failing after 3s Details CI runner can't reach npmjs.org through GFW. Use npmmirror.com mirror for npm package installs, same pattern as pip uses Tsinghua mirror for backend deps.	2026-05-07 00:03:09 +08:00
Gan, Jimmy	8c30fb7a3a	chore: remove hardcoded secrets from configuration template Replace real secrets in tmp_remote/configuration.yml with __ROTATE_*__ placeholders. All leaked values have already been rotated. Also add .claude/, .codex/, and security_artifacts/ to .gitignore.	2026-02-28 22:22:23 +08:00
Gan, Jimmy	394a1aa367	security: harden dashboard (SSH keys, auth, uploads, CORS, non-root) Remove SSH private keys from git, add SECRET_KEY validation, move WS auth from query string to first message, add session limits/idle timeout, PBKDF2 Fernet key, refresh token rotation, TOTP replay protection, file upload size limit + filename sanitization, symlink safety check, restrict CORS methods, IP-gate OpenClaw token, run container as non-root, rate-limit refresh/passkey endpoints, sanitize Gitea path params. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-02-26 17:22:25 +08:00
Gan, Jimmy	a10cb50ca0	Add __pycache__ to gitignore and remove duplicates	2026-02-22 10:05:37 +08:00
Gan, Jimmy	dd3e8e0d2c	security: remove hardcoded secrets, add health endpoint, add security headers	2026-02-20 22:04:01 +08:00
Gan, Jimmy	70aa421d7f	Add NAS dashboard MVP: Docker mgmt, Gitea, Files, Terminal	2026-02-19 01:59:50 +08:00

6 Commits