4 commits

Author	SHA1	Message	Date
Graham McIntire	b30f2cf5af	filter more honeybadger alerts, format dates to users time zone, email template cleanup	2026-02-01 09:27:42 -06:00
Graham McIntire	43fe8cd326	Add design document for HIBP password breach checking	2026-01-31 17:16:58 -06:00
Graham McIntire	0388637b65	Update infrastructure documentation with Valkey restart fix ... Documents the root cause analysis and solution for the Valkey pod restart issue. The problem was a race condition during node restarts, not a Flannel failure. Resolution: - Added system-cluster-critical priority class to Valkey - Application-level Redis health checks provide additional resilience - Monitoring ongoing to verify stability over 24-48 hours 🤖 Generated with Claude Code	2026-01-19 15:41:11 -06:00
Graham McIntire	5e9032314b	Add comprehensive Pangolin security rules ... Created 30+ security rules to protect against common web attacks: Protection categories: - SQL injection (UNION, OR/AND, comments) - XSS (script tags, event handlers) - Path traversal (directory traversal, absolute paths) - Common exploits (WordPress, PHPMyAdmin, admin panels) - Malicious bots (scanners, scrapers, empty user agents) - Shell injection (commands, ShellShock) - File upload exploits (PHP, double extensions) - Information disclosure (.git, .env, backups, configs) - Protocol attacks (HTTP/0.9, TRACE, TRACK) - Known CVEs (Log4Shell, SSRF, XXE) Features: - Allowlist for legitimate traffic (health checks, agents, monitoring) - Detailed documentation with examples - Testing and troubleshooting guides - Performance impact analysis - Compliance mapping (OWASP, PCI DSS, SOC 2) Documentation: docs/PANGOLIN_SECURITY.md Configuration: pangolin-security-rules.toml	2026-01-15 12:25:21 -06:00