Ullrich Schäfer be3e69c10b Security hardening: headers, scanning, Docker, firewall ... - Caddy: HSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy on all responses - Caddy: Block scanner paths (.env, .git, wp-config, etc.) with 403 - CI: Gitleaks secret scanning + pnpm audit for vulnerabilities - Dependabot: Weekly npm + GitHub Actions + monthly Docker updates - Docker: Non-root user in journal, planner, and brouter containers - Server: UFW firewall (22/80/443 only) + fail2ban (8 IPs already banned) - SECURITY.md: Vulnerability disclosure policy - Privacy page: Security practices section added Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-03-25 09:58:12 +01:00
..
app	Filter 404s from Sentry on client and server	2026-03-25 08:02:26 +00:00
public	Sentry improvements: context, tracing, source maps, privacy manifest	2026-03-25 03:11:07 +01:00
Dockerfile	Security hardening: headers, scanning, Docker, firewall	2026-03-25 09:58:12 +01:00
package.json	Add Sentry error tracking to both apps	2026-03-25 02:35:16 +01:00
react-router.config.ts	Complete monorepo toolchain setup (tasks 1.1-1.7)	2026-03-22 12:12:57 +01:00
server.ts	Filter 404s from Sentry on client and server	2026-03-25 08:02:26 +00:00
tsconfig.json	Fix planner production server + use .ts extensions everywhere	2026-03-25 01:41:33 +01:00
vite.config.ts	Sentry improvements: context, tracing, source maps, privacy manifest	2026-03-25 03:11:07 +01:00