Sam Rolfe
c83c9df0a3
- Go service with its own multi-stage Dockerfile and docker-compose.yml; runs as container webrestrict-control on port 8791. - SQLite schema for the full AGENTS.md §7 data model via versioned migrations (PRAGMA user_version); audit log is append-only. - Configuration from the process environment; the real env file is gitignored and a template is committed. No secrets in the repo. - Separate session login (signed HMAC cookie + CSRF) for Sam. - GET /health; HTMX + server-rendered dashboard styled with the Family Home Lab tokens.css (copied) and Inter fonts; dark mode; phone-friendly. - Caddy vhost for webrestrict.lab.audasmedia.com.au applied on .35 (Let's Encrypt cert issued); route recorded in deploy/caddy/webrestrict.caddy. - Unit tests for config, auth and store. Co-Authored-By: Paperclip <noreply@paperclip.ing>
44 lines
473 B
Plaintext
44 lines
473 B
Plaintext
# Secrets
|
|
.env
|
|
.env.*
|
|
*.local
|
|
*.keystore
|
|
# Real Control Service env file (keep the .example template)
|
|
environment.d/*.env
|
|
|
|
# Local build caches / runtime data
|
|
.gocache/
|
|
.gobuild/
|
|
data/
|
|
|
|
# Go
|
|
bin/
|
|
*.exe
|
|
*.test
|
|
*.out
|
|
|
|
# Python
|
|
__pycache__/
|
|
*.pyc
|
|
.venv/
|
|
venv/
|
|
|
|
# Node / web
|
|
node_modules/
|
|
dist/
|
|
*.visual-check.*
|
|
|
|
# Android / Kotlin
|
|
.gradle/
|
|
build/
|
|
local.properties
|
|
*.apk
|
|
|
|
# OS / editors
|
|
.DS_Store
|
|
*.swp
|
|
|
|
|
|
# Pi agent generated memory (local state, not source)
|
|
.pi/memory-vault/
|