ai_ml_operations/scha - scha - Git

26 Commits 1 Branch 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
westfarn	898b1918ba	Drop compromised eMudhra roots from outbound TLS trust (#36 ) Unit Tests / test (push) Successful in 4s Details Outbound TLS in this image still trusted the compromised eMudhra roots (`emSign ECC Root CA - G3` and `Comodo AAA Services`). - Image install now upgrades `ca-certificates` and regenerates the trust bundle. - `certifi` is locked at 2026.10.23, which drops those roots for `requests` and `httpx`. Merge this, then redeploy prod. Reviewed-on: #36	2026-10-23 09:02:26 -07:00
westfarn	862b13a666	Upgrade to Django 6 (#20 ) (#26 ) Unit Tests / test (push) Successful in 3s Details ## Summary Closes #20. - Bump Django pin from `>=5.2,<6` to `>=6.0,<7` (resolved 6.0.7) and refresh `uv.lock` - Update `TimeInfoBase.save` for Django 6 keyword-only `Model.save` - Pass `required_score` directly to `ReCaptchaV3` (removes django-recaptcha deprecation warning) - Fix `Payments.date` fixed default → callable `timezone.now` (+ migration `0012`) Reviewed against [Django 6.0 release notes](https://docs.djangoproject.com/en/6.0/releases/6.0/). `DEFAULT_AUTO_FIELD` already `BigAutoField`. No other removed APIs in use. Compat notes - `django-phonenumber-field` 8.4.0 advertises Django 6.0 support - `django-recaptcha` 4.1.0 has no upper Django bound; classifiers still list through 5.2 only — smoke-tested via suite ## Test plan - [x] `uv run python manage.py check` — clean - [x] `uv run python manage.py test` — 30 passed - [ ] CI unit tests green on this PR - [ ] Smoke board pages, membership form, auth/sign-in, recaptcha after merge/deploy Reviewed-on: #26	2026-07-14 05:13:55 -07:00
westfarn	42418fd123	Dockerize scha + Gitea CI/CD auto-deploy via server-infra (#21 ) Unit Tests / test (push) Successful in 3s Details ## Summary - Dockerize SCHA Wheaton (uv packaging, Dockerfile, compose, entrypoint) and move secrets/DB config to env-driven `scha/settings/`. - Add Gitea Actions: unit tests on push/PR to `master`, auto-deploy on green master push via `server-infra/scripts/deploy.sh --app scha --env prod`. - Prod compose uses shared external Postgres only (no bundled DB); control-node secret template at `.env.prod.example`. Closes #19 (Part A). Depends on companion server-infra PR for catalog/host_apps registration. ## Test plan - [ ] `uv sync --frozen` + `DJANGO_ENV=dev DJANGO_SECRET_KEY=test uv run python manage.py check` - [ ] `docker compose build` succeeds locally - [ ] `docker compose up` serves app against bundled Postgres - [ ] `./scripts/validate-env.sh ~/Documents/secrets/scha/scha_prod.env` passes - [ ] After merge + server-infra catalog live: push to master runs Unit Tests then Deploy Reviewed-on: #21	2026-07-14 03:12:35 -07:00

Author

SHA1

Message

Date

westfarn

898b1918ba

Drop compromised eMudhra roots from outbound TLS trust (#36 )

Unit Tests / test (push) Successful in 4s

Details

Outbound TLS in this image still trusted the compromised eMudhra roots (`emSign ECC Root CA - G3` and `Comodo AAA Services`).

- Image install now upgrades `ca-certificates` and regenerates the trust bundle.
- `certifi` is locked at 2026.10.23, which drops those roots for `requests` and `httpx`.

Merge this, then redeploy prod.

Reviewed-on: #36

2026-10-23 09:02:26 -07:00

westfarn

862b13a666

Upgrade to Django 6 (#20 ) (#26 )

Unit Tests / test (push) Successful in 3s

Details

## Summary

Closes #20.

- Bump Django pin from `>=5.2,<6` to `>=6.0,<7` (resolved **6.0.7**) and refresh `uv.lock`
- Update `TimeInfoBase.save` for Django 6 keyword-only `Model.save`
- Pass `required_score` directly to `ReCaptchaV3` (removes django-recaptcha deprecation warning)
- Fix `Payments.date` fixed default → callable `timezone.now` (+ migration `0012`)

Reviewed against [Django 6.0 release notes](https://docs.djangoproject.com/en/6.0/releases/6.0/). `DEFAULT_AUTO_FIELD` already `BigAutoField`. No other removed APIs in use.

**Compat notes**
- `django-phonenumber-field` 8.4.0 advertises Django 6.0 support
- `django-recaptcha` 4.1.0 has no upper Django bound; classifiers still list through 5.2 only — smoke-tested via suite

## Test plan

- [x] `uv run python manage.py check` — clean
- [x] `uv run python manage.py test` — 30 passed
- [ ] CI unit tests green on this PR
- [ ] Smoke board pages, membership form, auth/sign-in, recaptcha after merge/deploy

Reviewed-on: #26

2026-07-14 05:13:55 -07:00

westfarn

42418fd123

Dockerize scha + Gitea CI/CD auto-deploy via server-infra (#21 )

Unit Tests / test (push) Successful in 3s

Details

## Summary
- Dockerize SCHA Wheaton (uv packaging, Dockerfile, compose, entrypoint) and move secrets/DB config to env-driven `scha/settings/`.
- Add Gitea Actions: unit tests on push/PR to `master`, auto-deploy on green master push via `server-infra/scripts/deploy.sh --app scha --env prod`.
- Prod compose uses shared external Postgres only (no bundled DB); control-node secret template at `.env.prod.example`.

Closes #19 (Part A). Depends on companion server-infra PR for catalog/host_apps registration.

## Test plan
- [ ] `uv sync --frozen` + `DJANGO_ENV=dev DJANGO_SECRET_KEY=test uv run python manage.py check`
- [ ] `docker compose build` succeeds locally
- [ ] `docker compose up` serves app against bundled Postgres
- [ ] `./scripts/validate-env.sh ~/Documents/secrets/scha/scha_prod.env` passes
- [ ] After merge + server-infra catalog live: push to master runs Unit Tests then Deploy

Reviewed-on: #21

2026-07-14 03:12:35 -07:00