Daniel Krähenbühl
1a7ef09805
Dashboard: - ApexCharts bar chart (income vs fixed costs vs expenses) and donut chart - KPI cards: income, fixed costs, savings rate with configurable goal - Greeting with time-of-day and locale-aware date/time display Authentication & security: - Email-based login (no username), case-insensitive lookup - JWT access/refresh tokens with rotation and blacklist - TOTP 2FA with QR code, backup codes (copy + PDF export) - 2FA recovery via email code - Cloudflare Turnstile CAPTCHA on login and register Email flows: - Email verification on registration (24h token) - Password reset flow (15min token, anti-enumeration) - Brevo SMTP integration with HTML + plaintext email templates - Notification emails: 2FA recovery, password changed, email changed Settings page: - 2FA management (enable/disable, QR, backup codes) - Active sessions list with per-device revoke - Data export: ZIP with 6 PDFs via fpdf2 - Notification preferences (3 toggles) - Danger zone: account deletion with mandatory export + confirmation phrase UI & layout: - Sidebar with collapsible/flyout mode, Angular signal-based dropdowns - Dark mode (class-based), language switcher (DE/FR/IT/EN) - Mobile-responsive layout with touch-friendly targets - Roboto font via @fontsource (GDPR-compliant, no Google CDN) - Pure Tailwind CSS v3 Infrastructure: - Forgejo Actions CI/CD pipeline (auto-deploy on push to main) - Gunicorn + Nginx + PostgreSQL production setup - Rate limiting, HSTS, secure cookies, CSRF protection
38 lines
924 B
YAML
38 lines
924 B
YAML
name: Deploy to Production
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: production
|
|
steps:
|
|
- name: Pull latest code
|
|
run: |
|
|
cd /home/armarium/armarium-suite
|
|
git fetch origin
|
|
git reset --hard origin/main
|
|
|
|
- name: Backend — install dependencies
|
|
run: |
|
|
cd /home/armarium/armarium-suite/backend
|
|
source venv/bin/activate
|
|
pip install -r requirements.txt --quiet
|
|
|
|
- name: Backend — run migrations
|
|
run: |
|
|
cd /home/armarium/armarium-suite/backend
|
|
source venv/bin/activate
|
|
python manage.py migrate --no-input
|
|
|
|
- name: Frontend — build
|
|
run: |
|
|
cd /home/armarium/armarium-suite/frontend
|
|
npm install --silent
|
|
npm run build -- --configuration production
|
|
|
|
- name: Restart service
|
|
run: sudo systemctl restart armarium
|