Commit graph

9 commits

Author SHA1 Message Date
37d745703c
security: remove RealIP middleware, tighten rate limiter defaults
- remove chi middleware.RealIP; deprecated in chi v5.3.0 due to IP spoofing
  vulnerabilities (GHSA-3fxj-6jh8-hvhx, GHSA-rjr7-jggh-pgcp, GHSA-9g5q-2w5x-hmxf)
- lower default RATE_LIMIT from 100 to 20 req/s per IP
- support RATE_LIMIT=0 to disable rate limiting entirely (for deployments behind
  a remote reverse proxy with its own rate limiting)
- fix incorrect .env.example comment (was 'per 15 minute window', is per second)
2026-05-23 18:37:55 -07:00
8c06caadf3
update sqlite dep, disallow non-ascii characters in API keys 2026-04-25 18:37:03 -07:00
7ccfe8e585 default integration flags to true, update x/crypto to latest, v1.1.0 2026-03-11 19:19:10 -07:00
bb1ee31308 code cleanups, switch to chi rate limiting middleware 2026-02-24 01:24:22 -08:00
244ab02651 using biome for html/cs/js formatting and linting, simplify app to run with no services, re-implement proton and signal implementations to be much better, configure all integration in web UI instead of .env 2026-02-09 01:19:47 -08:00
7fd57101a3 improve README, code cleaning, use the other sqlite lib for less RAM usage, use any instead of interface, add 3 retries with exponential backoff for undelivered notifications 2026-02-07 01:54:06 -08:00
ac40783aa7 re-architect to a new integration system, ensure that signal is optional, adding telegram support 2026-02-05 15:46:28 -08:00
e31ccc76c5 make protonmail notifications work again, cleaner UI, update to v2 of IMAP lib, 2026-02-03 03:25:48 -08:00
051a13cb7a re-organize folder structure 2026-02-02 14:52:07 -08:00