jaredandClaude Opus 4.8
d6214a0339
Lint / PHP (phpcs PSR-12) (push) Successful in 26s
Lint / JS (eslint) (push) Successful in 12s
Lint / PHP requirements (version + extensions) (push) Successful in 21s
Security / PHP Security (semgrep) (push) Successful in 1m11s
Lint / Deploy (push) Successful in 2s
Lint / Notify on failure (push) Has been skipped
Lint / PHP (phpcs PSR-12) (pull_request) Successful in 47s
Lint / JS (eslint) (pull_request) Successful in 12s
Lint / PHP requirements (version + extensions) (pull_request) Successful in 59s
Security / PHP Security (semgrep) (pull_request) Successful in 1m6s
Lint / Deploy (pull_request) Has been skipped
Lint / Notify on failure (pull_request) Has been skipped
- migrations/000_baseline.sql: full schema baseline captured from prod (validated on a throwaway DB: 17 tables/17 FKs), so the schema is reproducible for fresh installs / disaster recovery - create_recurring_tickets cron: send the Matrix ticket-created notification and invalidate the stats cache like the other create paths - create_ticket_api.php + TicketController::create: invalidate the stats cache on create/escalate/reopen so dashboard counts aren't stale - scripts/cleanup_orphan_uploads.php: restored, made safe (24h mtime grace, 9-digit-dir only, skips avatars/symlinks, matches the unique filename column, --dry-run) - cron/cleanup_audit_log.php: enforce the configured audit-log retention (deleteOldLogs was implemented but never called) - README: correct CSRF-rotation, hwmon dedup (no 24h window), SLA (no P3), stats-cache callers, and the project structure/endpoint listing - .env.example: document TRUSTED_PROXIES fail-open risk and .env quoting Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
61 lines
2.5 KiB
Bash
61 lines
2.5 KiB
Bash
# Tinker Tickets Environment Configuration
|
|
# Copy this file to .env and fill in your values
|
|
#
|
|
# NOTE: This file is parsed with parse_ini_file(). Any value containing special
|
|
# characters (#, ;, =, quotes, spaces, etc.) MUST be wrapped in double quotes,
|
|
# e.g. DB_PASS="p@ss;word#1". The application now fails loudly (dies with a clear
|
|
# error) if the .env file cannot be parsed, so an unquoted special character will
|
|
# take the whole app down rather than silently using a wrong value.
|
|
|
|
# Database Configuration
|
|
DB_HOST=10.10.10.50
|
|
DB_USER=tinkertickets
|
|
DB_PASS=your_password_here
|
|
DB_NAME=ticketing_system
|
|
|
|
# Matrix Webhook (optional - for notifications via matrix-hookshot)
|
|
# Set to your hookshot generic webhook URL, e.g.:
|
|
# https://matrix.lotusguild.org/webhook/<uuid>
|
|
MATRIX_WEBHOOK_URL=
|
|
|
|
# Matrix users to @mention on every new ticket (comma-separated Matrix user IDs)
|
|
# e.g. @jared:matrix.lotusguild.org,@alice:matrix.lotusguild.org
|
|
MATRIX_NOTIFY_USERS=
|
|
|
|
# Application Domain (required for Matrix webhook ticket links)
|
|
# Set this to your public domain (e.g., t.lotusguild.org)
|
|
APP_DOMAIN=
|
|
|
|
# Allowed Hosts for HTTP_HOST validation (comma-separated)
|
|
# Include all domains that can access this application
|
|
ALLOWED_HOSTS=localhost,127.0.0.1
|
|
|
|
# Trusted reverse proxy IP(s), comma-separated (e.g. the Authelia/nginx proxy).
|
|
# Set this to the IP address(es) of your reverse proxy. Authelia forward-auth
|
|
# headers (Remote-User / Remote-Groups) and forwarded client IPs are only
|
|
# trusted when REMOTE_ADDR is in this list.
|
|
#
|
|
# Leaving this EMPTY disables reverse-proxy verification entirely: the app then
|
|
# trusts Remote-User / Remote-Groups headers from ANY source. That is unsafe if
|
|
# the PHP backend is reachable directly (bypassing the proxy), because a client
|
|
# can then spoof those headers and log in as an admin. Only leave it empty when
|
|
# network topology guarantees PHP is reachable solely via the trusted proxy.
|
|
#
|
|
# Exact IP match only (no CIDR). Example (single proxy): TRUSTED_PROXIES=10.10.10.27
|
|
# Example (multiple): TRUSTED_PROXIES=10.10.10.27,10.10.10.28
|
|
TRUSTED_PROXIES=
|
|
|
|
# Timezone (default: America/New_York)
|
|
TIMEZONE=America/New_York
|
|
|
|
# LDAP / lldap (for user avatar lookups)
|
|
LDAP_ENABLED=true
|
|
LDAP_HOST=10.10.10.39
|
|
LDAP_PORT=3890
|
|
LDAP_BIND_DN=uid=tinker-tickets,ou=people,dc=example,dc=com
|
|
LDAP_BIND_PW=
|
|
LDAP_BASE_DN=dc=example,dc=com
|
|
LDAP_USER_BASE=ou=people,dc=example,dc=com
|
|
# How long to cache avatar images locally (seconds, default 3600)
|
|
AVATAR_CACHE_TTL=3600
|