Add Forgejo CI/CD workflows with self-hosted runners #1

Merged
deco merged 4 commits from forgejo-workflows into main 2025-07-19 12:03:34 +03:00

4 commits

Author SHA1 Message Date
Decobus
6467cdee3c Allow internal network access without API key
Some checks failed
Lint and Build / build (20) (pull_request) Failing after 20s
Lint and Build / build (22) (pull_request) Failing after 33s
- Skip API key authentication for localhost and local network IPs
- Maintain security for external access while preserving usability
- Log internal network access for transparency
- Supports localhost, 127.0.0.1, and 192.168.x.x ranges

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-19 05:02:12 -04:00
Decobus
afc6f5f3a8 Implement comprehensive security fixes for API protection
Some checks failed
Lint and Build / build (22) (pull_request) Failing after 37s
Lint and Build / build (20) (pull_request) Failing after 48s
- Add API key authentication middleware for all API endpoints
- Fix path traversal vulnerability with screen parameter validation
- Implement comprehensive input validation and sanitization
- Create centralized security utilities in lib/security.ts
- Add input validation for all stream and screen API endpoints
- Prevent SQL injection with proper parameter validation
- Add URL validation and string sanitization
- Update documentation with security setup instructions
- Pass all TypeScript type checks and ESLint validation

Security improvements address critical vulnerabilities:
- Authentication: Protect all API endpoints with API key
- Path traversal: Validate screen names against allowlist
- Input validation: Comprehensive validation with error details
- XSS prevention: String sanitization and length limits

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-19 04:57:54 -04:00
Decobus
91ef418b1b Update project documentation with comprehensive architecture details
Some checks failed
Lint and Build / build (22) (pull_request) Failing after 43s
Lint and Build / build (20) (pull_request) Failing after 46s
- Enhanced CLAUDE.md with detailed architectural concepts and patterns
- Added dynamic table naming system documentation
- Documented persistent OBS connection management and dual integration
- Explained glass morphism UI architecture and real-time monitoring
- Updated README.md with modern professional presentation
- Added comprehensive setup instructions and feature highlights
- Included all development commands and API endpoint references
- Cross-referenced CLAUDE.md for detailed technical documentation

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-19 04:47:47 -04:00
Decobus
9f019db74f Add Forgejo CI/CD workflows with self-hosted runners
Some checks failed
Lint and Build / build (20) (pull_request) Failing after 2m27s
Lint and Build / build (22) (pull_request) Failing after 3m3s
- Convert GitHub Actions workflow to Forgejo format
- Configure workflows to run on self-hosted runners
- Maintain existing build pipeline with Node.js 20 and 22 matrix
- Include type checking, linting, and build steps
- Upload build artifacts for both Node.js versions

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-19 04:42:30 -04:00