Commit graph

27 commits

Author SHA1 Message Date
d8606bb609
Complete nested module alias fixes and update Sobelow skips
Software design fixes:
- Add proper aliases for all nested modules
- release.ex: Ecto.Adapters.SQL
- packet_consumer.ex: Aprsme.Cluster.PacketDistributor
- cleanup_scheduler.ex: Aprsme.Workers.PacketCleanupWorker
- health_check.ex: Ecto.Adapters.SQL
- status_live/index.ex: Aprsme.Cluster.LeaderElection
- packet_receiver.ex: Aprsme.Cluster.LeaderElection
- packet_distributor.ex: Aprsme.Cluster.LeaderElection, AprsmeWeb.MapLive.PacketStore

Security:
- Update .sobelow-skips for false positive SQL injection warning (div is builtin function)

All 13 software design suggestions now complete.
All 13 warnings previously fixed.
Remaining: 42 refactoring opportunities (complex/nested functions)
2026-02-09 11:26:47 -06:00
8dc713ce3f
Add info logging for mobile websocket events and filter healthcheck logs
- Add info-level logging to all mobile websocket handle_in callbacks to track
  incoming messages (subscribe_bounds, update_bounds, search_callsign, etc.)
- Create LogFilter plug to exclude K8s healthcheck requests from Phoenix logs
- Filter logs for /health, /ready, and / endpoints to reduce noise from
  continuous healthcheck probes
- Configure Plug.Telemetry to use custom log level function

This eliminates noisy healthcheck logs while providing better visibility
into mobile websocket API usage.
2025-10-25 17:04:59 -05:00
537057ee9a
more redis cleanup 2025-10-22 16:30:04 -05:00
cc4578653f
cleanup and remove redis 2025-10-22 16:19:17 -05:00
1b638cf739
chore: add contributor guide and harden cache/csrf helpers 2025-10-15 11:53:21 -05:00
751b8a5f1b
improve dialyzer 2025-10-13 10:02:15 -05:00
c2fcf534dd
update and format 2025-08-13 09:39:39 -05:00
d8ea2b785f
Fix ShutdownHandler health check errors
- Add safe check for ShutdownHandler process existence
- Handle case where ShutdownHandler might not be started yet
- Prevent GenServer.call errors in health checks
- Use Process.whereis and Process.alive? to verify process state

This fixes Sentry errors about 'no process' when health checks
try to call ShutdownHandler.shutting_down?()

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-28 08:19:27 -05:00
eeeebef34e
Fix PgBouncer database connection and graceful shutdown
- Add SKIP_DB_CREATE env var to skip database creation when using PgBouncer
- Fix redis_children() to return proper child specs
- Implement zero-downtime graceful shutdown without user notifications
- Add health check plug for Kubernetes probes
- Remove user-facing shutdown notifications for seamless deployments

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-26 15:51:06 -05:00
226a53bf61
Add Redis-based distributed caching and rate limiting
This commit introduces a dual-mode caching and rate limiting system that can use
either Redis (for distributed deployments) or ETS/Cachex (for single-node setups).

Key changes:
- Add Cache abstraction layer that automatically switches between Redis and Cachex
- Implement RedisCache module with full distributed cache functionality
- Implement RedisRateLimiter with sliding window algorithm for accurate rate limiting
- Add RateLimiterWrapper to provide unified API for both implementations
- Update application startup to conditionally use Redis when REDIS_URL is set
- Migrate all cache operations to use the new Cache abstraction
- Support graceful fallback to ETS-based solutions when Redis is unavailable

The system automatically detects Redis availability via REDIS_URL environment
variable and switches between implementations without code changes. This enables
proper distributed caching and rate limiting in Kubernetes deployments while
maintaining backward compatibility for development environments.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-26 15:29:38 -05:00
935b70b4b1
Fix rate limiter header check bug
Fixed ArgumentError in rate limiter by replacing cond statement with
proper case pattern matching. The cond was incorrectly evaluating
assignment expressions as truthy values instead of checking if headers
were empty lists.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-25 09:30:59 -05:00
fb34553fe9
Add Cloudflare header support for real client IP
- Updated IP geolocation to check CF-Connecting-IP header first
- Added support for X-Real-IP header as additional fallback
- Updated rate limiter to use same header priority for consistency
- Headers checked in order: CF-Connecting-IP > X-Forwarded-For > X-Real-IP > remote_ip

This ensures proper client IP detection when the site is behind Cloudflare.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-24 20:29:48 -05:00
3937dfede7
Configure CSP headers to allow Sentry and CDN scripts
- Added custom content-security-policy to put_secure_browser_headers
- Allowed script sources:
  - https://js.sentry-cdn.com for Sentry SDK
  - https://cdnjs.cloudflare.com for OverlappingMarkerSpiderfier
- Allowed connect sources for Sentry error reporting:
  - https://*.ingest.sentry.io
  - https://*.sentry.io
- Removed custom ContentSecurityPolicy plug in favor of built-in configuration

This properly configures the Content Security Policy to allow all necessary
external resources while maintaining security.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-18 15:30:36 -05:00
dade93ee5c
Implement Sentry JavaScript integration with proper CSP configuration
- Restored Sentry JavaScript SDK script tag
- Created custom ContentSecurityPolicy plug to allow Sentry domains
- Added proper CSP headers allowing:
  - js.sentry-cdn.com for the SDK
  - *.ingest.sentry.io and *.sentry.io for error reporting
- Initialized Sentry in app.js with:
  - Proper DSN configuration
  - Browser tracing integration
  - 10% transaction sampling rate
  - Filter for non-critical ResizeObserver errors
- Added CSP plug to router pipeline after put_secure_browser_headers

This properly integrates Sentry for JavaScript error tracking while
maintaining security through explicit CSP configuration.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-18 15:17:35 -05:00
46340e008a
update deps 2025-07-16 08:20:20 -05:00
628495fc76
badpackets formatting 2025-07-12 08:02:51 -05:00
d88adf4293
reduce caching 2025-07-11 14:42:01 -05:00
0785ef954b
geolocation tweak 2025-07-10 17:28:10 -05:00
e6c0bb740b
geolocation tweak 2025-07-10 17:25:32 -05:00
4b38c8f601
geolocation tweak 2025-07-10 17:23:42 -05:00
3d21e9bc77
geolocate debug 2025-07-10 17:20:06 -05:00
f5e0f33ac2
fix geolocation hopefully 2025-07-10 17:12:49 -05:00
4f0fa59be8
ip lookup on page load 2025-07-10 16:45:21 -05:00
711d92ebb6
performance improvements 2025-07-08 10:03:52 -05:00
5ad101a69e
passing tests 2025-07-07 16:29:38 -05:00
cba86fb082
more languages 2025-07-06 10:08:58 -05:00
fc449ed5f9
en español 2025-07-05 15:51:39 -05:00