Kyle DammannandClaude Opus 5.5
ef9deaeff7
- Django 5.2 + PostgreSQL 17 via docker compose (app + db, volumes, healthcheck on /healthz, test profile running pytest against Postgres) - Custom e-mail user model with user/admin roles - Invitation-only registration with single-use, hashed, expiring links - Admin area: invitations, role changes, deactivation, password reset via one-time link or temporary password (forced change on login) - First admin created from ADMIN_EMAIL/ADMIN_PASSWORD on startup - Login rate limiting per e-mail and IP (DB-backed, worker-safe) - Proxy middleware honouring X-Forwarded-* only from TRUSTED_PROXIES, optional CLIENT_IP_HEADER (e.g. CF-Connecting-IP) - Security headers (CSP, HSTS, Permissions-Policy), secure __Host- cookies - Mobile-first German UI, CLAUDE.md, README, init-env script - 65 tests for auth, permissions, proxy handling and rate limiting Co-Authored-By: Claude Opus 5.5 <[email protected]>
44 lines
1.5 KiB
HTML
44 lines
1.5 KiB
HTML
{% load static %}<!doctype html>
|
|
<html lang="de">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
|
|
<meta name="theme-color" content="#b4532a">
|
|
<meta name="robots" content="noindex, nofollow">
|
|
<title>{% block title %}Kochbuch{% endblock %} · Kochbuch</title>
|
|
<link rel="stylesheet" href="{% static 'css/app.css' %}">
|
|
<script src="{% static 'js/app.js' %}" defer></script>
|
|
</head>
|
|
<body>
|
|
<header class="topbar">
|
|
<a class="brand" href="{% url 'core:home' %}">Kochbuch</a>
|
|
{% if user.is_authenticated %}
|
|
<details class="menu">
|
|
<summary aria-label="Menü">☰</summary>
|
|
<nav>
|
|
<a href="{% url 'core:home' %}">Rezepte</a>
|
|
<a href="{% url 'accounts:profile' %}">Mein Konto</a>
|
|
{% if user.is_admin %}
|
|
<a href="{% url 'accounts:admin_users' %}">Nutzer verwalten</a>
|
|
<a href="{% url 'accounts:admin_invitations' %}">Einladungen</a>
|
|
{% endif %}
|
|
<form method="post" action="{% url 'accounts:logout' %}">
|
|
{% csrf_token %}
|
|
<button type="submit" class="linklike">Abmelden</button>
|
|
</form>
|
|
</nav>
|
|
</details>
|
|
{% endif %}
|
|
</header>
|
|
|
|
<main class="container">
|
|
{% if messages %}
|
|
<ul class="messages">
|
|
{% for message in messages %}<li class="msg msg-{{ message.tags }}">{{ message }}</li>{% endfor %}
|
|
</ul>
|
|
{% endif %}
|
|
{% block content %}{% endblock %}
|
|
</main>
|
|
</body>
|
|
</html>
|