Samir Boulahtit b68d542258 fix(security): harden Redis auth, restrict /metrics, document Gitea port fix ...

- Add Redis password via REDIS_PASSWORD env var (--requirepass flag)
- Update all REDIS_URL and REDIS_ADDR references to include password
- Restrict /metrics endpoint to localhost and Docker internal networks (403 for external requests)
- Document Gitea port 3000 localhost binding fix (must be applied manually on server)
- Add REDIS_PASSWORD to .env.example

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-04 23:15:15 +01:00

..

__init__.py

Refactoring code for modular approach

2025-09-09 21:27:58 +02:00

celery_config.py

fix(ops): rebalance container memory limits to prevent celery OOM kills

2026-03-01 22:15:35 +01:00

config.py

feat: wire Google Wallet into loyalty enrollment, stamps, and points flows

2026-02-24 10:38:46 +01:00

database.py

chore: PostgreSQL migration compatibility and infrastructure improvements

2026-01-11 17:52:28 +01:00

environment.py

refactor: modernize code quality tooling with Ruff

2025-11-28 19:37:38 +01:00

frontend_detector.py

feat: platform-aware storefront routing and billing improvements

2026-02-23 23:42:41 +01:00

lifespan.py

feat: add automated backups and Prometheus/Grafana monitoring stack (Steps 17-18)

2026-02-14 22:40:08 +01:00

logging.py

fix(lint): auto-fix ruff violations and tune lint rules

2026-02-12 23:10:42 +01:00

observability.py

fix(security): harden Redis auth, restrict /metrics, document Gitea port fix

2026-03-04 23:15:15 +01:00