6 Commits

Author	SHA1	Message	Date
steve	0c8491ce7a	feat: run container as non-root user ... Create appuser with configurable UID/GID (default 1000, matching example.env PID/GID vars) and switch to it before starting Gunicorn. Override at build time with --build-arg UID=... --build-arg GID=... Note: the /data volume mount must be owned by the matching UID on the host for the DB to remain writable.	2026-03-09 20:13:21 -06:00
steve	1a0a1371bc	fix: correct marquee scroll speed and add code TODOs ... - Fixed scrolling marquee to use a fixed px/s speed via JS instead of a fixed duration, preventing it from speeding up as entries are added - Added inline TODO comments throughout codebase to track known issues (rate limiting, CSRF, unbounded queries, deprecated Flask decorator, PII logging, schema versioning, Docker non-root user, etc.) - Added todo-to-issue GitHub Action to auto-create Issues from TODOs on push to main - Added .claude/ to .gitignore	2026-03-09 19:30:13 -06:00
steve	ffa09e3daa	Making the header/title are a variable ... Refactor Dockerfile and entrypoint script; add index.html.template and update example.env	2025-04-04 14:46:29 -06:00
Steve Dogiakos	75e69d5144	chore: lint and update docker-compose.yml ... - Fixed port variable interpolation to use ${PORT:-8000} for a default value. - Updated volume configuration to use a named volume (guestbook_data) mounted at /data. - Improved YAML formatting for clarity.	2025-04-01 21:53:25 -06:00
steve	4f48124bbf	feat!: migrate from Node.js to Flask with SQLite	2025-04-01 16:55:34 -06:00
steve	d7a45a2452	feat: add Node.js guestbook skeleton	2025-01-27 13:25:14 -07:00