jacobh2
50a0d6792a
Build Kvitt images / build (push) Failing after 1m20s
Part A (D-132): KVITT_WEB_DIR (default /app) served under /app/ by a small handler: /app redirects to /app/, app routes fall back to index.html, a missing assets/* file is 404, assets cached immutable, index.html no-store, the app's own CSP plus nosniff, DENY and no-referrer. Unsafe paths never reach the file system. /app paths count against the unauthenticated per-IP limit. Without the directory every /app path stays 404 not_found. server/Dockerfile gains a Node 24 LTS stage (pinned by digest) building web/, passed through the Rust stage so npm and rustc never run at once on the Pi 3; the build context is the repository root with an allowlist .dockerignore (server/.dockerignore removed); workflow, build-images.sh and infra/dev/build.sh follow. Part B (D-133): GET /analytics/trends (E-34) and GET /analytics/forecast (E-35), authenticated, read-only, SQL month buckets; rules (half-up average, trailing 3-month moving average, percent against the rounded average, template occurrence per month) in kvitt-domain::analytics. OpenAPI, examples, contracts-check and tests updated (35 operations). Cargo.lock: rustls-webpki 0.103.16 and webpki-root-certs 1.0.10 (RUSTSEC-2026-0382, -0383) so that cargo audit passes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TQd3pEP9UeN2uifbHknQ7B
20 lines
548 B
Plaintext
20 lines
548 B
Plaintext
# Build context of server/Dockerfile: the repository root (D-132, SPEC §10.3). An allowlist, so the Android project,
|
|
# the docs, the screenshot goldens, worktrees and secrets never enter the context (it stays a few MB).
|
|
# infra/backup/Dockerfile builds from its own directory and does not read this file.
|
|
*
|
|
!server
|
|
!web
|
|
!contracts
|
|
# Inside the allowed directories: build output, local data, dependencies and anything secret.
|
|
server/target
|
|
server/data
|
|
web/node_modules
|
|
web/dist
|
|
**/*.sqlite*
|
|
**/*.db
|
|
**/*.apk
|
|
**/*.pem
|
|
**/.env
|
|
**/.env.*
|
|
**/.DS_Store
|