trails-cool/trails
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
trails/apps/journal/app/routes
History
Ullrich Schäfer be3e69c10b
Security hardening: headers, scanning, Docker, firewall 
- Caddy: HSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy,
  Permissions-Policy on all responses
- Caddy: Block scanner paths (.env, .git, wp-config, etc.) with 403
- CI: Gitleaks secret scanning + pnpm audit for vulnerabilities
- Dependabot: Weekly npm + GitHub Actions + monthly Docker updates
- Docker: Non-root user in journal, planner, and brouter containers
- Server: UFW firewall (22/80/443 only) + fail2ban (8 IPs already banned)
- SECURITY.md: Vulnerability disclosure policy
- Privacy page: Security practices section added

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-25 09:58:12 +01:00
..
activities.$id.tsx Implement Journal activity feed (Group 10) 2026-03-24 23:20:04 +01:00
activities._index.tsx Implement Journal activity feed (Group 10) 2026-03-24 23:20:04 +01:00
activities.new.tsx Implement Journal activity feed (Group 10) 2026-03-24 23:20:04 +01:00
api.auth.login.ts Complete Journal auth: add passkey prompt, dev magic link, fix validation 2026-03-23 22:19:17 +01:00
api.auth.register.ts Complete Journal auth: add passkey prompt, dev magic link, fix validation 2026-03-23 22:19:17 +01:00
api.routes.$id.callback.ts Fix CORS on Planner→Journal callback endpoint 2026-03-25 01:16:32 +00:00
api.routes.$id.edit-in-planner.ts Fix waypoint loading in Edit in Planner flow 2026-03-24 20:22:58 +00:00
api.routes.$id.gpx.ts Fix GPX export: use API route with direct download link 2026-03-24 20:22:58 +00:00
auth.login.tsx Wire up i18n in both apps 2026-03-25 01:47:58 +00:00
auth.logout.tsx Implement Journal auth: passkeys + magic links, no passwords 2026-03-23 17:38:46 +01:00
auth.register.tsx Wire up i18n in both apps 2026-03-25 01:47:58 +00:00
auth.verify.tsx Implement Journal auth: passkeys + magic links, no passwords 2026-03-23 17:38:46 +01:00
home.tsx Sentry improvements: context, tracing, source maps, privacy manifest 2026-03-25 03:11:07 +01:00
privacy.tsx Security hardening: headers, scanning, Docker, firewall 2026-03-25 09:58:12 +01:00
routes.$id.edit.tsx Implement Journal route management (Group 8) 2026-03-23 22:25:10 +01:00
routes.$id.tsx Wire up i18n in both apps 2026-03-25 01:47:58 +00:00
routes._index.tsx Wire up i18n in both apps 2026-03-25 01:47:58 +00:00
routes.new.tsx Implement Journal route management (Group 8) 2026-03-23 22:25:10 +01:00
users.$username.tsx Implement Journal auth: passkeys + magic links, no passwords 2026-03-23 17:38:46 +01:00