ixgadmin/ixg_platform
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
IXG Platform
29 commits 1 branch 0 tags 397 KiB
Find a file
ixgadmin 243d4eefcd Run with DEBUG off and add HSTS and CSP headers 
DEBUG was on in production, so an error rendered a full traceback and the
DEBUG-only media route served /media/ixg-documents/... publicly, bypassing
the document permission checks. Set DJANGO_DEBUG=False in the env files
(untracked) and add friendly 500/404/403 templates.

With DEBUG off Django no longer serves /static/, so nginx does: the static
root moves to /var/www/ixg-platform-static (mounted into the app container)
because /root is not traversable by www-data.

HSTS (max-age 1y, includeSubDomains) is added to every HTTPS host, and a
pragmatic CSP to the app/ops/portal locations. 'unsafe-inline' is required
by the inline scripts/styles; self-hosting the CDN assets and nonces is a
follow-up.
2026-09-25 12:37:40 +00:00
apps Make logout a POST and end the Keycloak session 2026-09-21 12:53:14 +00:00
docs Help centre: portal-scoped guide audiences, and links that resolve 2026-09-16 16:39:07 +00:00
dsp_platform Make logout a POST and end the Keycloak session 2026-09-21 12:53:14 +00:00
nginx Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
scripts Deployment hardening: HTTPS/CSRF settings, loopback-only app port, entrypoint passthrough 2026-09-16 16:39:07 +00:00
templates Run with DEBUG off and add HSTS and CSP headers 2026-09-25 12:37:40 +00:00
.dockerignore Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
.gitignore Deployment hardening: HTTPS/CSRF settings, loopback-only app port, entrypoint passthrough 2026-09-16 16:39:07 +00:00
create_agent.py Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
docker-compose.yml Run with DEBUG off and add HSTS and CSP headers 2026-09-25 12:37:40 +00:00
Dockerfile Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
manage.py Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
requirements.txt P99C: compliance automation - CoA auto-generation and EUDR due diligence 2026-08-05 13:58:39 +00:00
SESSION_CHECKPOINT.md Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00