Yusuf Suleman 6bd23e7e8b fix: security hardening across platform ...

- Disable open /api/auth/register endpoint (gateway)
- Require gateway session auth on Immich and Karakeep hooks proxies
- Replace SHA-256 with bcrypt in fitness service (auth + seed)
- Remove hardcoded Telegram user IDs from fitness seed
- Add Secure flag to session cookie
- Add domain allowlist and content-type validation to image proxy
- Strengthen .gitignore (env variants, runtime data, test artifacts)

2026-03-29 08:25:50 -05:00

.claude

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

docs

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

frontend-v2

fix: security hardening across platform

2026-03-29 08:25:50 -05:00

gateway

fix: security hardening across platform

2026-03-29 08:25:50 -05:00

packages

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

services

fix: security hardening across platform

2026-03-29 08:25:50 -05:00

.env.example

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

.gitignore

fix: security hardening across platform

2026-03-29 08:25:50 -05:00

docker-compose.yml

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

package-lock.json

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

package.json

Initial commit: Second Brain Platform

2026-03-28 23:20:40 -05:00

Description

Second Brain Platform - Dashboard, Fitness, Budget, Inventory, Trips, Reader, Media

778 KiB

Languages

Svelte 54.4%

Python 31.6%

JavaScript 10.6%

TypeScript 2%

CSS 1.1%

Other 0.2%