aprs.me/test/aprsme_web/plugs
Graham McIntire 0f2195ef9d
Some checks failed
Build and Push / Build and Push Docker Image (push) Failing after 2s
security: CSP nonces, RemoteIp CIDR gating, rate limiting, NetworkPolicies, deadlock fixes
- Content-Security-Policy: nonce-based per-request plug replacing unsafe-inline scripts
- RemoteIp: CIDR-based trust gating via InetCidr, skips forwarded headers from untrusted peers
- Rate limiting: auth pipeline (20/min), LiveView event handlers, existing mobile channel limits
- NetworkPolicy: 4 k8s policies (web ingress, cluster, metrics, egress) for least-privilege networking
- PartitionManager: deadlock retry with exponential backoff in drop_partition
- Tests: reduced parallelism (max_cases 4), packets_test async:false to prevent trigger contention
- k8s: APRS_PASSWORD -> APRS_PASSCODE secretRef, vendor/aprs submodule hardened
2026-07-26 14:04:56 -05:00
..
api_csrf_test.exs Fix all mix credo --strict warnings (188 → 0) 2026-06-12 16:27:20 -05:00
content_security_policy_test.exs security: CSP nonces, RemoteIp CIDR gating, rate limiting, NetworkPolicies, deadlock fixes 2026-07-26 14:04:56 -05:00
health_check_test.exs Fix all mix credo --strict warnings (188 → 0) 2026-06-12 16:27:20 -05:00
ip_geolocation_test.exs Fix Cloudflare IP geolocation not reaching LiveView on page load 2026-03-22 16:08:00 -05:00
rate_limiter_test.exs security: CSP nonces, RemoteIp CIDR gating, rate limiting, NetworkPolicies, deadlock fixes 2026-07-26 14:04:56 -05:00
remote_ip_test.exs security: CSP nonces, RemoteIp CIDR gating, rate limiting, NetworkPolicies, deadlock fixes 2026-07-26 14:04:56 -05:00
set_locale_test.exs passing tests 2025-07-07 16:29:38 -05:00