Files
Siteforge/.gitignore
T
nmemmertandClaude Sonnet 5.5 8a796964b9
Publish Container / build (push) Successful in 17m3s
Security & hardening pass: scrypt password hashing, persisted admin sessions, upvote/analytics rate limits, dependency fixes, healthcheck, lint cleanup; v2.10.0
- Study passwords: salted scrypt; legacy SHA-256 hashes verified and upgraded on login
- Admin sessions persisted (hashed tokens) so deploys no longer log the admin out
- Upvotes: rate limit + one per client per question, approved questions only; rate limit on analytics play/event
- npm audit: 46 -> 4 vulnerabilities (tiptap bumped to 3.31.4)
- Untrack per-user data (study users/notes/progress/etc.) from git
- Dockerfile HEALTHCHECK; node --test suite for password hashing
- Fix email template cards remounting (lost input focus) on each keystroke
- Lint: 34 errors -> 0

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-09 08:45:39 -04:00

58 lines
1.2 KiB
Plaintext

# Logs
logs
*.log
npm-debug.log*
yarn-debug.log*
yarn-error.log*
pnpm-debug.log*
lerna-debug.log*
node_modules
dist
dist-ssr
*.local
# Live admin data — persists on the server via the docker-compose bind mount.
# The seed copy kept in data/admin-content.json is committed separately as
# the image default and is preserved here for the Docker build context only.
# Uncomment the line below if you do NOT want to track live data in git.
# data/admin-content.json
data/backups/
data/hit-stats.json
data/visitor-stats.json
data/contact-submissions.json
data/totp-secret.json
data/uploads-meta.json
data/study-sessions.json
# Local environment secrets — never commit
.env
.env.*
# Claude Code agent worktrees — local scratch space, never part of the repo
.claude/worktrees/
# Editor directories and files
.vscode/*
!.vscode/extensions.json
.idea
.DS_Store
*.suo
*.ntvs*
*.njsproj
*.sln
*.sw?
# Persisted admin sessions (hashed tokens)
data/admin-sessions.json
# Per-user / visitor data — lives only in the server's data volume, never in git
data/study-users.json
data/study-notes/
data/study-progress/
data/study-reminders.json
data/study-community.json
data/analytics-events.json
data/admin-reply-history.json
data/episode-plays.json