MMD 32323565e6 feat(hardening): login rate limiting, per-service memory limits, pinned images ...

- slowapi limiter on POST /auth/login (10/min per IP, Persian error msg);
  edge-level coarse limits stay in Traefik
- mem_limit on every main-compose service (~4.4GB worst case, protects the
  8GB shared host during rebuilds)
- monitoring images pinned to verified tags (prom v3.4.1, grafana 11.6.3,
  loki/promtail 3.5.0, node-exporter v1.9.1, postgres-exporter v0.17.1,
  cadvisor v0.49.1); exporter image name fixed to postgres-exporter

2026-09-18 22:27:59 +03:30

..

__init__.py

feat(backend): add FastAPI backend — procurement, inventory domain, Casdoor auth, PM arrival endpoints

2026-08-25 19:08:14 +03:30

audit.py

feat(data-safety): scheduled DB backups + audit trail + verified actor attribution

2026-09-18 22:23:34 +03:30

errors.py

fix(auth): Casdoor JWT verification and 401 semantics; add /auth/login password-grant endpoint

2026-08-29 14:43:49 +03:30

pagination.py

feat(backend): add FastAPI backend — procurement, inventory domain, Casdoor auth, PM arrival endpoints

2026-08-25 19:08:14 +03:30

ratelimit.py

feat(hardening): login rate limiting, per-service memory limits, pinned images

2026-09-18 22:27:59 +03:30

security.py

feat(data-safety): scheduled DB backups + audit trail + verified actor attribution

2026-09-18 22:23:34 +03:30

serialization.py

feat(backend): add FastAPI backend — procurement, inventory domain, Casdoor auth, PM arrival endpoints

2026-08-25 19:08:14 +03:30