SnapOtter d61226496b fix(security): harden rate limits, Redis auth, resource caps, and error sanitization ...

- Lower LOGIN_ATTEMPT_LIMIT default from 30 to 10 (brute-force protection)
- Lower RATE_LIMIT_PER_MIN default from 1000 to 300
- Add Redis authentication (requirepass) with REDIS_PASSWORD env var
- Add Redis maxmemory 512mb cap to prevent unbounded growth
- Add mem_limit: 1g to Postgres and Redis containers
- Strip internal file paths from all error responses (defense-in-depth)
- Add startup warnings for default admin/Postgres/Redis credentials
- Update security test expectations for new defaults

2026-06-20 00:53:11 +08:00

..

api

fix(security): harden rate limits, Redis auth, resource caps, and error sanitization

2026-06-20 00:53:11 +08:00

demo

feat!: SnapOtter 2.0.0

2026-06-17 14:33:09 +08:00

docs

feat(docs): Two-Doors home, otter-orange brand, Pagefind search, and enterprise SSO/SCIM/roles guides

2026-06-19 18:46:59 +08:00

landing

chore: remove dead landing components and a stale vitest exclude

2026-06-19 18:46:55 +08:00

web

fix: post-2.0 audit bug fixes (404 route, worker logging, outpaint gate, pandoc path)

2026-06-19 18:46:52 +08:00