21 Commits

Author SHA1 Message Date
Aaron Aronchick
08462b430f Merge master into security/bind-ports-to-localhost: keep localhost port binding and redis healthcheck 2026-03-05 13:32:32 +00:00
Abhimanyu Saharan
df7152dcad feat(docker): add watch mode for automatic frontend rebuilds in Docker 2026-03-05 00:54:09 +05:30
Abhimanyu Saharan
0fe61e3e08 refactor(env): update NEXT_PUBLIC_API_URL to use 'auto' for better flexibility 2026-03-03 02:40:28 +05:30
copilot-swe-agent[bot]
35b3829da0 refactor: use custom worker script instead of standard RQ CLI
- Add scripts/rq-docker for Docker container compatibility
- Update Dockerfile to copy scripts directory
- Replace standard rq worker command with custom worker script
- Custom worker includes built-in scheduling via _drain_ready_scheduled_tasks

Co-authored-by: abhi1693 <5083532+abhi1693@users.noreply.github.com>
2026-03-02 14:57:00 +00:00
copilot-swe-agent[bot]
e6217b3ff5 fix: add --with-scheduler flag to RQ worker in compose.yml
Co-authored-by: abhi1693 <5083532+abhi1693@users.noreply.github.com>
2026-03-02 14:51:12 +00:00
Abhimanyu Saharan
09643b8cf7 Update env_file reference in compose.yml 2026-02-27 18:34:58 +05:30
Simone
93161d3800 fix: add Redis healthcheck and security response headers
- Add healthcheck to Redis service in compose.yml and upgrade
  depends_on from service_started to service_healthy so backend
  and webhook-worker wait for Redis readiness.
- Add HTTP security headers middleware (X-Content-Type-Options,
  X-Frame-Options, Referrer-Policy, Permissions-Policy) to the
  FastAPI backend.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-22 22:20:53 +01:00
Aaron Aronchick
79120681de security: bind redis and postgres ports to localhost only
Prevents external access to Redis (6379) and Postgres (5432).
Both services are internal-only - containers communicate via
Docker network, host port binding only needed for local debugging.

Flagged by DigitalOcean security scan 2026-02-22.
2026-02-22 03:53:28 +00:00
Abhimanyu Saharan
f9b14af477 refactor: migrate webhook queue to RQ with updated configuration 2026-02-15 13:02:55 +05:30
Abhimanyu Saharan
72b36fdace compose: make rqscheduler redis URL configurable 2026-02-15 00:22:27 +00:00
Abhimanyu Saharan
370609ca29 webhooks: harden scheduler bootstrap + tidy public exports 2026-02-14 23:46:07 +00:00
Abhimanyu Saharan
9220d9982a chore: decouple webhook-worker from backend service dependency 2026-02-14 23:46:07 +00:00
Abhimanyu Saharan
9a49768b52 chore: centralize webhook scheduler interval config 2026-02-14 23:46:07 +00:00
Abhimanyu Saharan
f07b4d5ea4 feat: add RQ-based webhook dispatch queue and delayed worker 2026-02-14 23:46:07 +00:00
Abhimanyu Saharan
571b4844d9 feat: update local authentication mode to require a non-placeholder token of at least 50 characters 2026-02-11 19:40:33 +05:30
Abhimanyu Saharan
06ff1a9720 feat: implement local authentication mode and update related components 2026-02-11 19:40:33 +05:30
Abhimanyu Saharan
9bd34503d6 refactor: reorganize template files and update provisioning paths 2026-02-10 20:01:08 +05:30
Abhimanyu Saharan
5c25c4bb91 chore(backend): upgrade deps and remove redis/rq 2026-02-10 16:05:49 +05:30
openclaw-agent
7ac9aa659d fix(compose): avoid Clerk placeholders; include templates in backend image 2026-02-07 11:31:11 +00:00
Ishaan (OpenClaw)
affce2aba8 chore(compose): default POSTGRES_DB to mission_control 2026-02-07 07:15:53 +00:00
Ishaan (OpenClaw)
8c0e9b1931 Add Dockerfiles and compose quickstart 2026-02-06 23:33:25 +00:00