Commit Graph

97 Commits

Author SHA1 Message Date
Jake Howard 7fcbbad885
Move gzipping to nginx
This means less time is spent in gunicorn, letting the workers process other requests sooner.
2024-05-04 23:19:43 +01:00
Jake Howard 514e609973
Change minify-html details to be more spec compliant 2024-05-04 23:07:35 +01:00
Jake Howard 0f328aff0a
Minify HTML 2024-05-04 20:07:59 +01:00
Jake Howard f83c38c2f1
Add logging for image rendition generation 2024-04-07 15:52:33 +01:00
Jake Howard bd4c1a193a
Add page type for talks
Content coming soon, probably
2024-03-01 17:09:56 +00:00
Jake Howard 166441b3e3
Set CSRF cookie as httpOnly 2024-01-05 15:59:23 +00:00
Jake Howard 366dc6a123
Extract lite-youtube embed into `wagtail-lite-youtube-embed` package 2023-10-27 17:12:00 +01:00
Jake Howard 899e97dedc
Allow protocol to be configured for spotify proxy 2023-09-21 13:33:55 +01:00
Jake Howard dde014860a
Unset HttpOnly for CSRF cookie 2023-04-16 16:48:58 +01:00
Jake Howard bc95a8ea21
Upgrade Django and everything else 2023-04-16 15:56:58 +01:00
Jake Howard fbef7c61b2
Remove what's new banner 2023-04-16 15:04:59 +01:00
Jake Howard 37cf309bb0
Add activitypub well-known forwarding
Disabled until needed
2022-11-17 22:36:22 +00:00
Jake Howard d16c8d83f0
Allow setting ALLOWED_HOSTS directly 2022-11-16 14:57:33 +00:00
Jake Howard 6f6e57a0c7
Add enforce host 2022-11-16 14:31:44 +00:00
Jake Howard 5a8116ec22
Fix default CSP 2022-10-31 09:57:49 +00:00
Jake Howard ccdc3e918e
Add types for permissions policy 2022-10-30 19:35:26 +00:00
Jake Howard 01d78a7378
Add permissions policy 2022-10-30 19:12:26 +00:00
Jake Howard d809890b0f
Add naive CSP
This is a very weak setup so far, as requires some more testing to confirm which origins are allowed for each resource.
2022-10-30 19:09:38 +00:00
Jake Howard e630ef8856
Allow swagger editor to make CORS requests 2022-10-30 19:00:27 +00:00
Jake Howard 91d022c44c
Bump HSTS to 30 days 2022-10-30 18:56:40 +00:00
Jake Howard cb6aed2567
Replace `drf-yasg` with DRF native schema generator
I don't need anything advance. Just redirect to the swagger editor for the UI. Makes the app much simpler
2022-10-23 21:30:00 +01:00
Jake Howard 35579a8803
Remove dedicated fragments cache
Reuse the default one to avoid an extra redis connection
2022-10-21 11:40:49 +01:00
Jake Howard 04aa301c75
Add management command to purge caches 2022-10-02 20:47:40 +01:00
Jake Howard 8f66feeaa5
Remove test 404 and 500 paths outside dev 2022-10-02 19:25:36 +01:00
Jake Howard 1ae3288a73
Store template fragments in separate cache
This makes clearing them less expensive
2022-10-02 17:32:32 +01:00
Jake Howard 65b36f5b07
Disable workflows in admin
I'm the only one using it, so it doesn't really make sense. And disabling it outright can make things perform faster
2022-09-20 09:25:40 +01:00
Jake Howard 592da67185
Add blockquote and super/sub scripts to rich text 2022-09-15 08:19:08 +01:00
Jake Howard c40987c14f
Add healthcheck 2022-09-05 13:35:48 +01:00
Jake Howard db24bb7e0a
Disable password reset 2022-09-05 13:13:01 +01:00
Jake Howard 8805416807
Disable update check
I work for torchbox, i'll notice
2022-09-04 21:10:06 +01:00
Jake Howard b167cd4ca4
Set `ALLOWED_HOSTS` correctly based on base hostname 2022-09-04 16:52:05 +01:00
Jake Howard d93bc2450d
Remove sentry enviornment variable
There will be only 1
2022-09-04 16:40:59 +01:00
Jake Howard ee307bcfbf
Define rich text features in settings
This removes them from migrations, avoiding the need to create new ones
when they change
2022-09-03 21:07:27 +01:00
Jake Howard 210ad88a2e
Add renditions cache 2022-09-03 17:33:11 +01:00
Jake Howard be009dcb37
Convert all images to webp
It's so much smaller!
2022-09-03 16:15:08 +01:00
Jake Howard 611e343564
Just use a simple icon field
The library has some issues, even if it is great

https://github.com/saschaludwig/django-fontawesome-6/pull/2
2022-09-02 15:29:12 +01:00
Jake Howard 7026aca934
Add account links to footer
Putting them in the navbar is too crowded.
2022-09-02 09:28:35 +01:00
Jake Howard 22e99502cb
Add 2FA
This should only be required in production, but we'll see how it goes.
It doesn't work quite how I expected it to.
2022-09-01 08:53:54 +01:00
Jake Howard 54af457d8e
Add SRI 2022-09-01 08:36:39 +01:00
Jake Howard 1e9ff9f24b
Remove CORS header from static files 2022-08-28 22:28:43 +01:00
Jake Howard e7c4acce8b
Add the ability to password protect pages
Useful for sharing drafts
2022-08-28 22:02:02 +01:00
Jake Howard 9ee46721c9
Use Wagtail login screen for admin-protected pages
Should never happen, but at least it won't look terrible
2022-08-28 20:34:23 +01:00
Jake Howard 6f073c6cfc
Update module name
This will handle more than just URLs
2022-08-28 20:30:50 +01:00
Jake Howard ac46c0ae0b
Add start of simple module to help with caching singleton URLs 2022-08-28 17:42:21 +01:00
Jake Howard 47980032b0
Add autocomplete for blog pots tags 2022-08-28 16:18:31 +01:00
Jake Howard 4b1d873bf8
Extend time for session cookies 2022-08-27 23:54:31 +01:00
Jake Howard 358013e16a
Add favicon 2022-08-27 23:44:56 +01:00
Jake Howard 2b0779b26a
Install sentry 2022-08-27 12:59:02 +01:00
Jake Howard a4471a49ee
Store cookies securely 2022-08-25 23:16:20 +01:00
Jake Howard fb739f93fc
Add basic logging config 2022-08-25 23:15:27 +01:00