Commit Graph
3 Commits
Author SHA1 Message Date
westfarn 0d98eebf0b Drop compromised eMudhra roots from outbound TLS trust (#19)
Deploy Beta / unit-tests (push) Successful in 21s
Deploy Beta / docker (push) Successful in 27s
Deploy Beta / deploy-beta (push) Successful in 5m38s
Outbound TLS in this image still trusted the compromised eMudhra roots (`emSign ECC Root CA - G3` and `Comodo AAA Services`).

- Image install now upgrades `ca-certificates` and regenerates the trust bundle.
- `certifi` is locked at 2026.10.23, which drops those roots for `requests` and `httpx`.

Merge this, then redeploy beta and prod.

Reviewed-on: #19
2026-10-23 09:01:51 -07:00
westfarn 617bda3e8b Fix dj_queue notify errors by switching to psycopg3.
Deploy Beta / unit-tests (push) Successful in 9s
Deploy Beta / docker (push) Successful in 17s
Deploy Beta / deploy-beta (push) Successful in 3m51s
dj_queue expects connection.notifies() (psycopg3); psycopg2 exposed notifies as a list and caused TypeError loops in the worker.
2026-08-09 06:09:26 -05:00
westfarn 1f7d78de64 Add Django site, Docker packaging, and beta/prod Gitea deploys.
Deploy Beta / unit-tests (push) Successful in 9s
Deploy Beta / docker (push) Successful in 17s
Deploy Beta / deploy-beta (push) Successful in 2m31s
Unignore site/ (was blocked by mkdocs /site rule), add compose/Docker/uv tooling, and split deploys so push to main goes to beta while prod stays manual.
2026-08-08 07:32:55 -05:00