bastebin

Commit Graph

Author	SHA1	Message	Date
Antigravity	9aeed2af50	security: remove config.json from tracking, add example configs and nginx guard - config.json now in .gitignore — it contained admin password hash and secret_key placeholder which should never be in version control - Add config.example.json as a safe, secrets-free template for new deployments - Add nginx.conf.example with proper reverse-proxy guards: - Static files served by Nginx directly (not Flask) - Explicit deny on .py, .json, .db, .log, .env and other sensitive extensions - Block dot-files and __pycache__ paths - No directory listing (autoindex off) - HTTPS enforcement with HSTS	2026-05-16 12:20:01 +01:00
ComputerTech	8365b38673	Implement user deletion tokens, admin panel, and security hardening	2026-03-31 12:05:06 +01:00
ComputerTech	14be14e437	Initial commit — Bastebin	2026-03-26 14:44:36 +00:00

Author

SHA1

Message

Date

Antigravity

9aeed2af50

security: remove config.json from tracking, add example configs and nginx guard

- config.json now in .gitignore — it contained admin password hash and
  secret_key placeholder which should never be in version control
- Add config.example.json as a safe, secrets-free template for new deployments
- Add nginx.conf.example with proper reverse-proxy guards:
  - Static files served by Nginx directly (not Flask)
  - Explicit deny on .py, .json, .db, .log, .env and other sensitive extensions
  - Block dot-files and __pycache__ paths
  - No directory listing (autoindex off)
  - HTTPS enforcement with HSTS

2026-05-16 12:20:01 +01:00

ComputerTech

8365b38673

Implement user deletion tokens, admin panel, and security hardening

2026-03-31 12:05:06 +01:00

ComputerTech

14be14e437

Initial commit — Bastebin

2026-03-26 14:44:36 +00:00

3 Commits