amber/fatkiss
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
aa0287eeaac226c5438e61e7ad5bd2c2c3704534
fatkiss/SECURITY.md
T

765 B
Raw Blame History

Fat Kiss Security Checklist

Production

  • HTTPS enforced (Let's Encrypt via certbot)
  • Cloudflare proxy (orange cloud)
  • Apache security headers
  • /admin/ noindex
  • No secrets in frontend code
  • .env files gitignored

Contact Form

  • Turnstile client + server verification
  • Rate limiting
  • Honeypot field
  • Input sanitization
  • Category allowlist
  • CORS locked

Admin

  • Gitea OAuth
  • MFA required
  • No server control exposed
  • Media path restricted

To Do

  • Configure Gitea webhook for auto-deploy
  • Set up Turnstile site key in contact form
  • Configure SMTP for contact handler
  • Enable MFA on Amber's Gitea account
  • Add CSP header
  • Regular dependency updates
Reference in New Issue View Git Blame Copy Permalink