Commit Graph

94 Commits

Author SHA1 Message Date
f83c38c2f1
Add logging for image rendition generation 2024-04-07 15:52:33 +01:00
bd4c1a193a
Add page type for talks
Content coming soon, probably
2024-03-01 17:09:56 +00:00
166441b3e3
Set CSRF cookie as httpOnly 2024-01-05 15:59:23 +00:00
366dc6a123
Extract lite-youtube embed into wagtail-lite-youtube-embed package 2023-10-27 17:12:00 +01:00
899e97dedc
Allow protocol to be configured for spotify proxy 2023-09-21 13:33:55 +01:00
dde014860a
Unset HttpOnly for CSRF cookie 2023-04-16 16:48:58 +01:00
bc95a8ea21
Upgrade Django and everything else 2023-04-16 15:56:58 +01:00
fbef7c61b2
Remove what's new banner 2023-04-16 15:04:59 +01:00
37cf309bb0
Add activitypub well-known forwarding
Disabled until needed
2022-11-17 22:36:22 +00:00
d16c8d83f0
Allow setting ALLOWED_HOSTS directly 2022-11-16 14:57:33 +00:00
6f6e57a0c7
Add enforce host 2022-11-16 14:31:44 +00:00
5a8116ec22
Fix default CSP 2022-10-31 09:57:49 +00:00
ccdc3e918e
Add types for permissions policy 2022-10-30 19:35:26 +00:00
01d78a7378
Add permissions policy 2022-10-30 19:12:26 +00:00
d809890b0f
Add naive CSP
This is a very weak setup so far, as requires some more testing to confirm which origins are allowed for each resource.
2022-10-30 19:09:38 +00:00
e630ef8856
Allow swagger editor to make CORS requests 2022-10-30 19:00:27 +00:00
91d022c44c
Bump HSTS to 30 days 2022-10-30 18:56:40 +00:00
cb6aed2567
Replace drf-yasg with DRF native schema generator
I don't need anything advance. Just redirect to the swagger editor for the UI. Makes the app much simpler
2022-10-23 21:30:00 +01:00
35579a8803
Remove dedicated fragments cache
Reuse the default one to avoid an extra redis connection
2022-10-21 11:40:49 +01:00
04aa301c75
Add management command to purge caches 2022-10-02 20:47:40 +01:00
8f66feeaa5
Remove test 404 and 500 paths outside dev 2022-10-02 19:25:36 +01:00
1ae3288a73
Store template fragments in separate cache
This makes clearing them less expensive
2022-10-02 17:32:32 +01:00
65b36f5b07
Disable workflows in admin
I'm the only one using it, so it doesn't really make sense. And disabling it outright can make things perform faster
2022-09-20 09:25:40 +01:00
592da67185
Add blockquote and super/sub scripts to rich text 2022-09-15 08:19:08 +01:00
c40987c14f
Add healthcheck 2022-09-05 13:35:48 +01:00
db24bb7e0a
Disable password reset 2022-09-05 13:13:01 +01:00
8805416807
Disable update check
I work for torchbox, i'll notice
2022-09-04 21:10:06 +01:00
b167cd4ca4
Set ALLOWED_HOSTS correctly based on base hostname 2022-09-04 16:52:05 +01:00
d93bc2450d
Remove sentry enviornment variable
There will be only 1
2022-09-04 16:40:59 +01:00
ee307bcfbf
Define rich text features in settings
This removes them from migrations, avoiding the need to create new ones
when they change
2022-09-03 21:07:27 +01:00
210ad88a2e
Add renditions cache 2022-09-03 17:33:11 +01:00
be009dcb37
Convert all images to webp
It's so much smaller!
2022-09-03 16:15:08 +01:00
611e343564
Just use a simple icon field
The library has some issues, even if it is great

https://github.com/saschaludwig/django-fontawesome-6/pull/2
2022-09-02 15:29:12 +01:00
7026aca934
Add account links to footer
Putting them in the navbar is too crowded.
2022-09-02 09:28:35 +01:00
22e99502cb
Add 2FA
This should only be required in production, but we'll see how it goes.
It doesn't work quite how I expected it to.
2022-09-01 08:53:54 +01:00
54af457d8e
Add SRI 2022-09-01 08:36:39 +01:00
1e9ff9f24b
Remove CORS header from static files 2022-08-28 22:28:43 +01:00
e7c4acce8b
Add the ability to password protect pages
Useful for sharing drafts
2022-08-28 22:02:02 +01:00
9ee46721c9
Use Wagtail login screen for admin-protected pages
Should never happen, but at least it won't look terrible
2022-08-28 20:34:23 +01:00
6f073c6cfc
Update module name
This will handle more than just URLs
2022-08-28 20:30:50 +01:00
ac46c0ae0b
Add start of simple module to help with caching singleton URLs 2022-08-28 17:42:21 +01:00
47980032b0
Add autocomplete for blog pots tags 2022-08-28 16:18:31 +01:00
4b1d873bf8
Extend time for session cookies 2022-08-27 23:54:31 +01:00
358013e16a
Add favicon 2022-08-27 23:44:56 +01:00
2b0779b26a
Install sentry 2022-08-27 12:59:02 +01:00
a4471a49ee
Store cookies securely 2022-08-25 23:16:20 +01:00
fb739f93fc
Add basic logging config 2022-08-25 23:15:27 +01:00
b7c18946b2
Store redirect files in cache 2022-08-25 23:08:59 +01:00
ccc9e24e77
Add some extra security headers 2022-08-25 23:08:04 +01:00
82e7a00d8a
Add plausible 2022-08-25 14:01:32 +01:00