LearningCircuit 07ff140c16 security: Docker hardening and session/debug setting tightening ...

Docker hardening:
- Add no-new-privileges and cap_drop ALL to main LDR service
- Add no-new-privileges to ollama service
- Mount local_collections volumes as read-only (:ro)
- Validate model name in ollama_entrypoint.sh to prevent injection
- Add security warning to elasticsearch example about disabled xpack

Application settings:
- Make app.debug non-editable via UI to prevent enabling debug mode
  in production (can still be set via environment variable)
- Reduce remember-me max from 90 to 30 days and default from 30 to 7
  days to limit session persistence window

2026-02-04 19:42:30 +01:00

..

ci

refactor: Address PR review feedback (#1570)

2026-01-18 16:14:24 -05:00

dev

Merge dev into sync-main-to-dev - resolve conflicts

2025-11-29 19:36:36 +01:00

pre_commit

fix: Use SQLAlchemy-UTC for proper timezone handling with SQLite

2025-08-06 20:35:07 +02:00

.gitkeep

Support auto-downloading ollama models with docker-compose. (#419)

2025-06-04 16:19:51 -04:00

ldr_entrypoint.sh

fix: Complete RAG Docker cache path fix and bump version to 1.3.24

2026-01-03 15:14:55 +01:00

ldr-diff-research.py

fix: remove debug output that was corrupting JSON response

2025-12-03 11:51:12 +01:00

mcp_smoke_test.sh

ci: Add MCP server tests workflow (#1506)

2026-01-31 23:12:11 +00:00

ollama_entrypoint.sh

security: Docker hardening and session/debug setting tightening

2026-02-04 19:42:30 +01:00