Kyle DammannandClaude Opus 5.5
ef9deaeff7
- Django 5.2 + PostgreSQL 17 via docker compose (app + db, volumes, healthcheck on /healthz, test profile running pytest against Postgres) - Custom e-mail user model with user/admin roles - Invitation-only registration with single-use, hashed, expiring links - Admin area: invitations, role changes, deactivation, password reset via one-time link or temporary password (forced change on login) - First admin created from ADMIN_EMAIL/ADMIN_PASSWORD on startup - Login rate limiting per e-mail and IP (DB-backed, worker-safe) - Proxy middleware honouring X-Forwarded-* only from TRUSTED_PROXIES, optional CLIENT_IP_HEADER (e.g. CF-Connecting-IP) - Security headers (CSP, HSTS, Permissions-Policy), secure __Host- cookies - Mobile-first German UI, CLAUDE.md, README, init-env script - 65 tests for auth, permissions, proxy handling and rate limiting Co-Authored-By: Claude Opus 5.5 <[email protected]>
16 lines
513 B
Bash
Executable File
16 lines
513 B
Bash
Executable File
#!/bin/sh
|
|
set -e
|
|
|
|
python manage.py migrate --noinput
|
|
python manage.py ensure_admin
|
|
python manage.py purge_ratelimits
|
|
|
|
exec gunicorn config.wsgi:application \
|
|
--bind 0.0.0.0:8000 \
|
|
--workers "${GUNICORN_WORKERS:-2}" \
|
|
--threads "${GUNICORN_THREADS:-4}" \
|
|
--timeout "${GUNICORN_TIMEOUT:-120}" \
|
|
--access-logfile -
|
|
# Forwarded headers are evaluated by core.middleware.ProxyMiddleware (TRUSTED_PROXIES),
|
|
# not by gunicorn, so gunicorn keeps its default of trusting none of them from remote peers.
|