• Joined on 2026-05-18
jacobh2 pushed to main at jacobh2/kvitt 2026-10-20 19:30:02 +02:00
d9e189abd5 SPEC v0.24: D-125 self-contained Pi compose project; workflow results
28fa71b978 Workflow and build-images.sh: compose deploy hint instead of /opt
Compare 2 commits »
jacobh2 pushed to main at jacobh2/kvitt 2026-10-20 19:19:52 +02:00
6e5981d62a Pi: minimal self-contained compose project (D-125)
jacobh2 pushed to main at jacobh2/kvitt 2026-10-20 19:08:04 +02:00
200c99f2f6 Pi bundle: drop the informational .env keys
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 20:38:38 +02:00
3820f9c3c3 Gitea workflow: sparse checkout, diagnostic step removed
b1f4c10a3d SPEC v0.23: D-124 Kvitt on port 443 through NPM; pinned-root template
Compare 2 commits »
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 20:35:31 +02:00
ad3523116f Android: portless fixture URLs after D-124
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 20:29:18 +02:00
038c6036fe Android: old host name out of the pinned-root config and the S-1 fixture
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 20:23:35 +02:00
4852803cdb Pi bundle: Kvitt on port 443 through NPM (D-124)
a86ad241f1 Server and contracts: public URL on port 443 (D-124)
Compare 2 commits »
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 20:19:31 +02:00
cce3e4e9d9 SPEC v0.22: D-122 S-22's release server and publish-apk host; D-123 no built-in server host; Kvitt host name
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 20:13:30 +02:00
ac17b41a3e install.sh: the NPM proxy host is README step 6
e381e371ea contracts-check: OpenAPI header expects the {host} server variable (D-123)
c9abd24c77 Server: no built-in public host, no trusted proxy by default; OpenAPI server variable host (D-123)
Compare 3 commits »
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 20:10:39 +02:00
4b1ae0c473 publish-apk.sh: build for KVITT_PUBLIC_HOST from infra/pi/.env (D-121)
4a4e45fcd9 Android: S-22's unpaired server from AppBuildInfo.releaseServerUrl (D-122)
Compare 2 commits »
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 20:07:17 +02:00
dd07ca4395 Gitea workflow: temporary secret diagnostic step
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 20:06:25 +02:00
4bcff2cf89 SPEC v0.21: D-120 Nginx Proxy Manager instead of Caddy and cert-sync; D-121 Android host property
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 20:02:23 +02:00
d090c6c850 Android: public host as the build property kvitt.publicHost (D-121)
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 19:53:12 +02:00
9231a1d755 infra README: owner decisions list after the M-1 answer (SPEC v0.20)
62f5279daa infra README: Nginx Proxy Manager proxy host, router to NPM, NPM fallback (D-120)
d05f13a080 Pi stack behind Nginx Proxy Manager: remove Caddy and cert-sync (D-120)
4f69ae010e Gitea workflow: registry login with the secret in the run line (env form came through empty on act_runner 0.6.1)
Compare 4 commits »
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 19:37:54 +02:00
f1abb0d2ef Server gate: cargo audit
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 19:36:27 +02:00
481889a9dc SPEC v0.20: D-119 APK download rate limit; owner answers to the security review; HANDOFF, prompts
jacobh2 pushed to main at jacobh2/kvitt 2026-10-19 17:19:42 +02:00
96e4cbdf4e Server: APK download rate limit 10/min per IP (D-119)
jacobh2 pushed to main at jacobh2/kvitt 2026-10-18 23:22:36 +02:00
3ef2c15764 SPEC v0.19: D-118 Android overhaul (shared test fixtures, :core:design limits and failures); HANDOFF, prompts, hash remap in plans
jacobh2 pushed to main at jacobh2/kvitt 2026-10-18 23:17:45 +02:00
c58236338c Android overhaul: one configureAndroidModule for the application and library plugins; coil-compose out of :app
74b5fbdb59 Android overhaul: S-7's state types in ExpenseEditorState.kt
a92c236689 Android overhaul: stale comments and the module README
0714242954 Android overhaul: the §9.6 text and date limits in :core:design's Limits.kt
e08aaf099b Android overhaul: remove dead code (tokens, an icon, catalogue and fake samples, helpers, unused imports)
Compare 8 commits »
jacobh2 pushed to main at jacobh2/kvitt 2026-10-18 22:52:23 +02:00
48fe119ae1 SPEC v0.18: D-109 to D-117; validation reports; HANDOFF, prompts
b985ce969d E-17: fcm_token at most 512 characters (security L-4)
baa5806812 Pictures: at most 16 megapixels and 64 MB decoded per upload (security M-3)
725901c98f Rate limiter: a token is accepted only after a 2xx; unaccepted tokens count against the IP (security H-1)
21407456f1 Server overhaul: sync push delete step in its own function; clap env feature dropped
Compare 22 commits »