  Rogeeandrogee
|
14b25959ab
|
HH-553: remove deprecated CORS env references (#130)
Co-authored-by: Rogee <rogee@ipao.vip>
|
2026-08-23 20:46:40 +08:00 |
|
|
Rogeeandrogee
|
eb83d241fe
|
HH-547: allow cross-origin widget requests (#126)
* HH-547: allow cross-origin widget requests
* fix(HH-547): align production preflight with wildcard CORS
---------
Co-authored-by: Rogee <rogee@ipao.vip>
|
2026-08-23 20:11:04 +08:00 |
|
|
rogee
|
25ef9ae494
|
fix(deploy): reuse shared redis and serve dashboard at root
|
2026-08-23 17:32:02 +08:00 |
|
|
Rogeeandrogee
|
fb83285617
|
HH-445: deploy production observability and runbooks (#96)
* HH-445: deploy production observability and runbooks
* fix(ops): share production database DSN
* fix(HH-445): enforce database TLS gate
* fix(HH-445): preserve production serve command
* fix(prod): require external database dependencies
* fix(prod): unify database host rejection gates
* test(prod): enforce exact database TLS runbook contract
---------
Co-authored-by: Rogee <rogee@ipao.vip>
|
2026-08-22 19:39:57 +08:00 |
|
|
Rogeeandrogee
|
f719529d66
|
fix(security): harden auth and secret handling (HH-444) (#101)
* fix(security): harden auth and credential handling (HH-444)
* fix(security): address HH-444 review blockers
* fix(security): close remaining HH-444 review blockers
---------
Co-authored-by: Rogee <rogee@ipao.vip>
|
2026-08-22 15:45:06 +08:00 |
|
|
Rogeeandrogee
|
6d6d80dd86
|
HH-441: harden durable storage and recovery (#92)
* HH-441: harden durable storage and recovery
* HH-441: clear recovery review blockers
* HH-441: enforce offsite backup failure domain
---------
Co-authored-by: Rogee <rogee@ipao.vip>
|
2026-08-22 02:16:02 +08:00 |
|