Commit graph

17 commits

Author SHA1 Message Date
Deco Vander
3581ea219d Fix rate limiting block syntax for caddy-ratelimit plugin
- Use proper rate_limit block syntax with key, rate, and window
- Rate 30 requests per minute for general API
- Rate 5 requests per minute for location submissions
- Should resolve 'wrong argument count' error
2025-07-03 01:00:07 -04:00
Deco Vander
118261a0bd Fix duplicate @submit matcher in Caddyfile
- Combined @submit matcher conditions into single block
- Fixed 'matcher is defined more than once' error
- Proper Caddyfile syntax for combining path and method matchers
2025-07-03 00:58:30 -04:00
Deco Vander
18fb9e5a73 Fix rate limiting syntax in Caddyfile
- Simplified rate limiting syntax to use 30r/m and 5r/m format
- Fixed matcher syntax for submission rate limiting
- Should resolve 'wrong argument count' error in Caddy
- Compatible with caddy-ratelimit plugin syntax
2025-07-03 00:56:26 -04:00
Deco Vander
c95d159a95 Install Caddy with rate limiting plugin for ARM64 deployment
- Install Go 1.21.5 for ARM64 architecture
- Use xcaddy to build Caddy with caddy-ratelimit plugin
- Create custom systemd service for plugin-enabled Caddy
- Restore rate limiting configuration in Caddyfile
- Production-ready setup with proper security and rate limiting
- Automatic SSL with enhanced protection against API abuse
2025-07-03 00:44:29 -04:00
Deco Vander
3d3eb2fd3b Enhance Caddyfile with explicit HTTPS and security features
- Added explicit HTTP to HTTPS redirects for clarity
- Improved security headers including CSP for MapBox/OSM
- Added health checks for reverse proxy
- Implemented rate limiting for API protection
- Added structured logging for security monitoring
- Enhanced compression with gzip and zstd
- Comprehensive www/non-www redirect handling
- Production-ready configuration for ICE Watch
2025-07-03 00:31:41 -04:00
Deco Vander
c203cdcbeb Update clone URLs to use SSH and correct repository name
- Changed all git clone URLs to use SSH (git@github.com:)
- Fixed repository name to derekslenk/ice (correct repo name)
- Updated both deployment script and README
- Provides better security for server deployments
2025-07-03 00:24:01 -04:00
Deco Vander
0af3b7eeea Update service user and group for icewatch service 2025-07-03 00:19:40 -04:00
Deco Vander
e35eb6c788 Update deployment instructions and service user/group 2025-07-03 00:14:42 -04:00
Deco Vander
2cda43edc9 Fix S3 upload: remove ACL parameters for bucket without ACL support
- Removed --acl public-read parameters from GitHub Action
- S3 bucket policy handles public access instead of ACLs
- Should resolve AccessControlListNotSupported error
2025-07-03 00:11:08 -04:00
Deco Vander
5b9c9f7396 Fix S3 bucket name and create deployment bucket
- Created S3 bucket: ice-puremichigan-lol
- Updated all references to use correct bucket name
- Applied public access policy for scripts/* path
- Ready for automated deployment via GitHub Actions
2025-07-03 00:02:52 -04:00
Deco Vander
e58e89ac72 Update S3 paths to use scripts folder with proper permissions
- Changed deployment URLs from /icewatch to /scripts
- Added cache control headers for better performance
- Updated bucket policy for scripts/* public access
- All deployment files now use consistent scripts/ path
2025-07-03 00:00:02 -04:00
Deco Vander
38ccd6d533 Update deployment URLs to use ice.puremichigan.lol S3 bucket
- Updated deployment script S3 URLs
- Updated README with correct bucket name
- Ready for automated S3 deployment via GitHub Actions
2025-07-02 23:57:27 -04:00
Deco Vander
08a8ded5f9 Add GitHub Actions workflow for S3 deployment
- Automated deployment script upload to public S3 bucket
- Uses GitHub OIDC for secure AWS authentication
- Updates README with current S3 URLs automatically
- Enables deployment from private repository
- Uploads systemd service and Caddyfile configurations
2025-07-02 23:56:18 -04:00
Deco Vander
5af83966d6 Fix deployment script URL in README 2025-07-02 23:51:30 -04:00
Deco Vander
e1b5f4caea Update README with correct repository URLs 2025-07-02 23:50:35 -04:00
Deco Vander
dd85ea6ee0 Update README with correct repository URLs 2025-07-02 23:48:58 -04:00
Deco Vander
edfdeb5117 Initial commit: ICE Watch Michigan community safety tool
- Node.js/Express backend with SQLite database
- Interactive map with real-time location tracking
- MapBox API integration for fast geocoding
- Admin panel for content moderation
- 24-hour auto-expiring reports
- Deployment scripts for Debian 12 ARM64
- Caddy reverse proxy with automatic HTTPS
2025-07-02 23:27:22 -04:00