lerko c3eac80e14 fix(store): chmod SQLite DB files to 0600 on open ...

Bare-metal installs created the DB with process umask (often 022),
making uptop.db, -wal, and -shm world-readable. These files contain
alert credentials and config. Now chmod 0600 after open. Missing
WAL/SHM siblings (not yet created) are silently skipped. Docker
installs were already mitigated by the non-root UID.

2026-06-12 09:51:11 -04:00

..

alert

fix(security): close XFF bypass and three secret-leak paths

2026-06-10 18:50:19 -04:00

cluster

refactor: unify logging with log/slog

2026-06-11 18:00:19 -04:00

config

refactor(models): split Site into SiteConfig + SiteState

2026-06-11 17:13:09 -04:00

importer

fix: Kuma import tokens/paused, Docker hardening, migrate-secrets idempotency

2026-06-12 08:39:30 -04:00

metrics

refactor(models): split Site into SiteConfig + SiteState

2026-06-11 17:13:09 -04:00

models

refactor(models): split Site into SiteConfig + SiteState

2026-06-11 17:13:09 -04:00

monitor

fix: seven fixes — token scan, variadic cleanup, TUI layout, compose secrets

2026-06-12 09:36:00 -04:00

server

fix: six small fixes — rate limiter leak, DST SLA, probe sort, TUI cleanup

2026-06-12 09:18:52 -04:00

store

fix(store): chmod SQLite DB files to 0600 on open

2026-06-12 09:51:11 -04:00

tui

fix: seven fixes — token scan, variadic cleanup, TUI layout, compose secrets

2026-06-12 09:36:00 -04:00