Commit graph

86 commits

Author SHA1 Message Date
37cf309bb0
Add activitypub well-known forwarding
Disabled until needed
2022-11-17 22:36:22 +00:00
d16c8d83f0
Allow setting ALLOWED_HOSTS directly 2022-11-16 14:57:33 +00:00
6f6e57a0c7
Add enforce host 2022-11-16 14:31:44 +00:00
5a8116ec22
Fix default CSP 2022-10-31 09:57:49 +00:00
ccdc3e918e
Add types for permissions policy 2022-10-30 19:35:26 +00:00
01d78a7378
Add permissions policy 2022-10-30 19:12:26 +00:00
d809890b0f
Add naive CSP
This is a very weak setup so far, as requires some more testing to confirm which origins are allowed for each resource.
2022-10-30 19:09:38 +00:00
e630ef8856
Allow swagger editor to make CORS requests 2022-10-30 19:00:27 +00:00
91d022c44c
Bump HSTS to 30 days 2022-10-30 18:56:40 +00:00
cb6aed2567
Replace drf-yasg with DRF native schema generator
I don't need anything advance. Just redirect to the swagger editor for the UI. Makes the app much simpler
2022-10-23 21:30:00 +01:00
35579a8803
Remove dedicated fragments cache
Reuse the default one to avoid an extra redis connection
2022-10-21 11:40:49 +01:00
04aa301c75
Add management command to purge caches 2022-10-02 20:47:40 +01:00
8f66feeaa5
Remove test 404 and 500 paths outside dev 2022-10-02 19:25:36 +01:00
1ae3288a73
Store template fragments in separate cache
This makes clearing them less expensive
2022-10-02 17:32:32 +01:00
65b36f5b07
Disable workflows in admin
I'm the only one using it, so it doesn't really make sense. And disabling it outright can make things perform faster
2022-09-20 09:25:40 +01:00
592da67185
Add blockquote and super/sub scripts to rich text 2022-09-15 08:19:08 +01:00
c40987c14f
Add healthcheck 2022-09-05 13:35:48 +01:00
db24bb7e0a
Disable password reset 2022-09-05 13:13:01 +01:00
8805416807
Disable update check
I work for torchbox, i'll notice
2022-09-04 21:10:06 +01:00
b167cd4ca4
Set ALLOWED_HOSTS correctly based on base hostname 2022-09-04 16:52:05 +01:00
d93bc2450d
Remove sentry enviornment variable
There will be only 1
2022-09-04 16:40:59 +01:00
ee307bcfbf
Define rich text features in settings
This removes them from migrations, avoiding the need to create new ones
when they change
2022-09-03 21:07:27 +01:00
210ad88a2e
Add renditions cache 2022-09-03 17:33:11 +01:00
be009dcb37
Convert all images to webp
It's so much smaller!
2022-09-03 16:15:08 +01:00
611e343564
Just use a simple icon field
The library has some issues, even if it is great

https://github.com/saschaludwig/django-fontawesome-6/pull/2
2022-09-02 15:29:12 +01:00
7026aca934
Add account links to footer
Putting them in the navbar is too crowded.
2022-09-02 09:28:35 +01:00
22e99502cb
Add 2FA
This should only be required in production, but we'll see how it goes.
It doesn't work quite how I expected it to.
2022-09-01 08:53:54 +01:00
54af457d8e
Add SRI 2022-09-01 08:36:39 +01:00
1e9ff9f24b
Remove CORS header from static files 2022-08-28 22:28:43 +01:00
e7c4acce8b
Add the ability to password protect pages
Useful for sharing drafts
2022-08-28 22:02:02 +01:00
9ee46721c9
Use Wagtail login screen for admin-protected pages
Should never happen, but at least it won't look terrible
2022-08-28 20:34:23 +01:00
6f073c6cfc
Update module name
This will handle more than just URLs
2022-08-28 20:30:50 +01:00
ac46c0ae0b
Add start of simple module to help with caching singleton URLs 2022-08-28 17:42:21 +01:00
47980032b0
Add autocomplete for blog pots tags 2022-08-28 16:18:31 +01:00
4b1d873bf8
Extend time for session cookies 2022-08-27 23:54:31 +01:00
358013e16a
Add favicon 2022-08-27 23:44:56 +01:00
2b0779b26a
Install sentry 2022-08-27 12:59:02 +01:00
a4471a49ee
Store cookies securely 2022-08-25 23:16:20 +01:00
fb739f93fc
Add basic logging config 2022-08-25 23:15:27 +01:00
b7c18946b2
Store redirect files in cache 2022-08-25 23:08:59 +01:00
ccc9e24e77
Add some extra security headers 2022-08-25 23:08:04 +01:00
82e7a00d8a
Add plausible 2022-08-25 14:01:32 +01:00
4a82d1262d
Add a basic rate limit 2022-08-23 08:43:58 +01:00
fc141c9778
Add the skeleton for an API app
URL handling is a hack, but it works
2022-08-22 23:26:39 +01:00
922e259aaf
Add legacy redirect app 2022-08-22 21:11:46 +01:00
bfa4755871
Move well-known URLs into their own app 2022-08-22 20:33:52 +01:00
10b32da3e0
Add crontab to project
Cron will likely be a duplicate compose service with a different
command.
2022-08-20 20:48:27 +01:00
710a4c7955
Humanize reading time 2022-08-19 17:31:40 +01:00
2dd660ed13
Add meta tags 2022-08-19 16:56:20 +01:00
af6449c9f8
Add a way to disable SEO indexing
Well, "disable"
2022-08-19 15:31:27 +01:00