iloom

kaezhou/iloom

Fork 0

Commit Graph

Author	SHA1	Message	Date
kae	028bb6cc0e	edit dockerfiles for compatible deploy	2026-07-22 12:35:21 +09:00
Chever John	24c449ecae	security: remove hardcoded credentials and add WebSocket auth/CORS - Clear default passwords in all service configs, require env vars - Add JWT auth + role middleware to WebSocket endpoints - Add origin whitelist to WebSocket upgrader (CORS protection) - Fix goroutine leak in WS proxy (double errCh read) - Update docker-compose to require secrets via ${VAR:?...} syntax - Mark deprecated k8s configmap passwords as REPLACE_AT_DEPLOY_TIME Co-Authored-By: Claude <noreply@anthropic.com>	2026-06-17 23:16:17 +08:00
Chever John	9c39c8cbd7	init: iloom WMS monorepo with K8s deployment manifests Go workspace (go.work) with 5 microservices + shared library: - gateway (8080), auth-service (8081), purchaser-service (8082) - textile-service (8083), washing-service (8084) - shared: proto definitions, common packages Infrastructure: docker-compose for local dev, K8s manifests for K3s cluster deployment (mysql/redis/etcd + traefik ingress). Frontend (iloom-flatten) added as git submodule. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-06-14 11:33:31 +08:00

Author

SHA1

Message

Date

kae

028bb6cc0e

edit dockerfiles for compatible deploy

2026-07-22 12:35:21 +09:00

Chever John

24c449ecae

security: remove hardcoded credentials and add WebSocket auth/CORS

- Clear default passwords in all service configs, require env vars
- Add JWT auth + role middleware to WebSocket endpoints
- Add origin whitelist to WebSocket upgrader (CORS protection)
- Fix goroutine leak in WS proxy (double errCh read)
- Update docker-compose to require secrets via ${VAR:?...} syntax
- Mark deprecated k8s configmap passwords as REPLACE_AT_DEPLOY_TIME

Co-Authored-By: Claude <noreply@anthropic.com>

2026-06-17 23:16:17 +08:00

Chever John

9c39c8cbd7

init: iloom WMS monorepo with K8s deployment manifests

Go workspace (go.work) with 5 microservices + shared library:
- gateway (8080), auth-service (8081), purchaser-service (8082)
- textile-service (8083), washing-service (8084)
- shared: proto definitions, common packages

Infrastructure: docker-compose for local dev, K8s manifests for
K3s cluster deployment (mysql/redis/etcd + traefik ingress).

Frontend (iloom-flatten) added as git submodule.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-06-14 11:33:31 +08:00

3 Commits