MechaCat02 70a6598924 chore: harden docker-compose deployment (bind, memory limits, no-new-privileges) ...

- frontend publishes on ${FRONTEND_PUBLISH_ADDR:-127.0.0.1} not 0.0.0.0 (M4).
- mem_limit on backend(4g)/postgres(1g)/frontend(512m), .env-overridable (M3).
- security_opt: no-new-privileges on app + postgres services.
New knobs documented + allowlisted in the config meta-test; compose validates.
Deferred (need host verification): image pinning, backend healthcheck, cap_drop
on postgres/tor, Postgres backup sidecar.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-13 22:10:29 +02:00

..

analysis

fix: exponential idle backoff for the analysis worker

2026-07-13 21:49:01 +02:00

api

fix: fall back to the original when a thumbnail fails to decode

2026-07-13 21:41:28 +02:00

auth

refactor: remove unused constant_time_eq and correct the token doc

2026-07-13 20:22:39 +02:00

bin

fix: tighten SSRF interceptor residuals

2026-07-13 22:00:55 +02:00

crawler

fix: tighten SSRF interceptor residuals

2026-07-13 22:00:55 +02:00

domain

feat(reactions): per-user like/dislike on mangas

2026-07-05 16:54:11 +02:00

repo

fix: enforce case-insensitive genre uniqueness

2026-07-13 21:25:46 +02:00

storage

fix: return NotFound when a storage key resolves to a directory

2026-07-13 19:59:51 +02:00

upload

fix: cap the multipart metadata part instead of buffering it unbounded

2026-07-13 20:10:05 +02:00

app.rs

fix: reap expired sessions with a periodic background sweep

2026-07-13 20:19:41 +02:00

config.rs

chore: harden docker-compose deployment (bind, memory limits, no-new-privileges)

2026-07-13 22:10:29 +02:00

error.rs

test: pin AppError -> HTTP status mapping (incl 501 and 429 Retry-After)

2026-07-13 22:03:28 +02:00

lib.rs

feat(admin): runtime-editable crawler & analysis config in the dashboard

2026-06-14 13:32:20 +02:00

main.rs

feat(admin): runtime-editable crawler & analysis config in the dashboard

2026-06-14 13:32:20 +02:00

settings.rs

fix: opt-in CDP re-validation of headless-browser navigations (SSRF)

2026-07-08 06:29:17 +02:00