MMD 43e317eeba chore(security): remove committed secrets/dumps, .env-based config, hardened deploy webhook ...

- Delete backups/*.dump and all real credentials from README/docs
  (prod MinIO creds, Casdoor passwords, server IP, admin password)
- All stack secrets now come from git-ignored .env (.env.example added);
  docker-compose.prod.yml refuses to boot without them (${VAR:?})
- seed_casdoor.py: bcrypt password hashing, generated console/client secrets
- Harden infra/deploy-webhook: HMAC-verified Gitea webhook receiver
  + systemd unit + README (replaces unauthenticated deploy endpoint)
- docs/SECRET-MANAGEMENT.md: secret inventory + rotation checklist

2026-09-18 21:55:24 +03:30

..

public

feat(mobile): mobile-responsive UI — bottom tab bar, bottom-sheet dialogs, PWA

2026-09-03 19:26:40 +03:30

scripts

feat(mobile): mobile-responsive UI — bottom tab bar, bottom-sheet dialogs, PWA

2026-09-03 19:26:40 +03:30

src

fix(wizard,quotes,dates): reliable error routing, single-project accept, Persian date/time input

2026-09-17 16:13:27 +03:30

.dockerignore

feat(frontend): add React UI — procurement office, wizard, suppliers, inventory panel (dash port), role-based login

2026-08-25 19:08:15 +03:30

.env.example

feat(frontend): in-page Casdoor login form + env-gated Developer Mode panel

2026-08-29 14:44:13 +03:30

Dockerfile

chore(security): remove committed secrets/dumps, .env-based config, hardened deploy webhook

2026-09-18 21:55:24 +03:30

index.html

feat(mobile): mobile-responsive UI — bottom tab bar, bottom-sheet dialogs, PWA

2026-09-03 19:26:40 +03:30

nginx.conf

fix(web): blank-screen hardening — stale chunk recovery, error boundary, no-cache index.html

2026-09-06 19:03:27 +03:30

package-lock.json

feat(frontend): add React UI — procurement office, wizard, suppliers, inventory panel (dash port), role-based login

2026-08-25 19:08:15 +03:30

package.json

feat(frontend): add React UI — procurement office, wizard, suppliers, inventory panel (dash port), role-based login

2026-08-25 19:08:15 +03:30

tsconfig.app.json

feat(frontend): add React UI — procurement office, wizard, suppliers, inventory panel (dash port), role-based login

2026-08-25 19:08:15 +03:30

tsconfig.json

feat(frontend): add React UI — procurement office, wizard, suppliers, inventory panel (dash port), role-based login

2026-08-25 19:08:15 +03:30

tsconfig.node.json

feat(frontend): add React UI — procurement office, wizard, suppliers, inventory panel (dash port), role-based login

2026-08-25 19:08:15 +03:30

vite.config.ts

feat(frontend): add React UI — procurement office, wizard, suppliers, inventory panel (dash port), role-based login

2026-08-25 19:08:15 +03:30