DocFast session 57: codebase audit, 4 fixes prepared, git push blocked

This commit is contained in:
Hoid 2026-02-19 13:17:29 +00:00
parent f7cda52b22
commit 0cc0c0860d
7 changed files with 251 additions and 53 deletions

View file

@ -1,55 +1,54 @@
{
"phase": "production-live",
"version": "0.1.1",
"version": "0.3.0",
"staging": {
"status": "running",
"namespace": "snapapi-staging",
"replicas": 1,
"image": "git.cloonar.com/openclawd/snapapi:v0.1.1",
"healthCheck": "passing",
"ingress": "staging.snapapi.eu (PENDING DNS)"
"image": "docker.io/library/snapapi:v0.3.0",
"healthCheck": "passing"
},
"production": {
"status": "running",
"namespace": "snapapi",
"replicas": 2,
"image": "git.cloonar.com/openclawd/snapapi:v0.1.1",
"image": "docker.io/library/snapapi:v0.3.0",
"healthCheck": "passing",
"domain": "https://snapapi.eu",
"tls": "Let's Encrypt (valid until 2026-05-20)"
},
"blockers": [
"FORGEJO_TOKEN is read-only — cannot push code to repo. Need write:repository scope token",
"SSH port 2222 not reachable from k3s-mgr or openclaw VM — deploy key useless without it",
"staging.snapapi.eu DNS record not set — cert-manager can't issue TLS cert",
"CI/CD pipeline written but untested (can't push to trigger it)"
"Stripe billing not yet integrated — paid plans show 'Coming Soon'",
"CI/CD pipeline blocked on git push access"
],
"completed": [
"Core screenshot API (POST /v1/screenshot)",
"Free signup (POST /v1/signup/free)",
"Playground endpoint (POST /v1/playground) — no auth, IP rate limited (5/hr), watermarked",
"Watermark service — overlays 'snapapi.eu — upgrade for clean screenshots' on playground output",
"Health check (GET /health)",
"SSRF protection (blocks private IPs, metadata, K8s services)",
"Browser pool with auto-recycling",
"PostgreSQL DB integration (api_keys + usage tables)",
"Usage tracking with per-key limits",
"Landing page with docs",
"REDESIGNED landing page — playground as hero demo, no free tier, paid-only pricing",
"Swagger/OpenAPI interactive docs at /docs",
"OpenAPI 3.0.3 spec at /openapi.json (updated for v0.3.0)",
"Production deployment (2 replicas, HA, anti-affinity)",
"Production TLS (Let's Encrypt) on snapapi.eu",
"Staging deployment (1 replica)",
"Staging ingress (pending DNS)",
"Cache-aside key lookup (multi-replica fix)",
"CI/CD workflow files (deploy.yml + promote.yml) — ready but untested"
"Mobile-responsive design",
"Per-route CSP",
"Removed free signup flow (v0.3.0)",
"Closed BUG-002 and BUG-003 (no longer applicable — no free tier)"
],
"notDone": [
"Email verification (signup gives key directly for now)",
"Stripe billing integration",
"Paid tier management",
"CI/CD pipeline (blocked on git push access)",
"Staging TLS (blocked on DNS)",
"API key recovery flow",
"Rate limiting per-key fairness",
"Status page",
"Uptime monitoring"
],
"lastSession": "2026-02-19T10:50:00Z"
"lastSession": "2026-02-19T12:30:00Z"
}