Kyle DammannandClaude Opus 5.5
ef9deaeff7
- Django 5.2 + PostgreSQL 17 via docker compose (app + db, volumes, healthcheck on /healthz, test profile running pytest against Postgres) - Custom e-mail user model with user/admin roles - Invitation-only registration with single-use, hashed, expiring links - Admin area: invitations, role changes, deactivation, password reset via one-time link or temporary password (forced change on login) - First admin created from ADMIN_EMAIL/ADMIN_PASSWORD on startup - Login rate limiting per e-mail and IP (DB-backed, worker-safe) - Proxy middleware honouring X-Forwarded-* only from TRUSTED_PROXIES, optional CLIENT_IP_HEADER (e.g. CF-Connecting-IP) - Security headers (CSP, HSTS, Permissions-Policy), secure __Host- cookies - Mobile-first German UI, CLAUDE.md, README, init-env script - 65 tests for auth, permissions, proxy handling and rate limiting Co-Authored-By: Claude Opus 5.5 <[email protected]>
54 lines
1.2 KiB
YAML
54 lines
1.2 KiB
YAML
name: kochbuch
|
|
|
|
services:
|
|
app:
|
|
build:
|
|
context: .
|
|
target: production
|
|
image: kochbuch:latest
|
|
restart: unless-stopped
|
|
env_file: .env
|
|
environment:
|
|
POSTGRES_HOST: db
|
|
ports:
|
|
- "${APP_BIND_ADDRESS:-0.0.0.0}:${APP_PORT:-8000}:8000"
|
|
volumes:
|
|
- media:/data/media
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
mem_limit: 512m
|
|
|
|
db:
|
|
image: postgres:17-alpine
|
|
restart: unless-stopped
|
|
environment:
|
|
POSTGRES_DB: ${POSTGRES_DB:-kochbuch}
|
|
POSTGRES_USER: ${POSTGRES_USER:-kochbuch}
|
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?POSTGRES_PASSWORD fehlt in .env}
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 5
|
|
mem_limit: 256m
|
|
|
|
# Runs the test suite against Postgres: docker compose --profile test run --rm test
|
|
test:
|
|
profiles: ["test"]
|
|
build:
|
|
context: .
|
|
target: test
|
|
env_file: .env
|
|
environment:
|
|
POSTGRES_HOST: db
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
|
|
volumes:
|
|
pgdata:
|
|
media:
|