Brandon Schneider
8e5efbe11f
Fix Dependabot vulns: update sqlx 0.7->0.8.6, add ene-rds Cargo.lock
...
Security fixes:
- rds_probe: bump sqlx 0.7.4 -> 0.8.6 (GHSA-xmrp-424f-vfpx MEDIUM)
Also removes transitive rustls-webpki 0.101.7 dependency chain,
fixing GHSA-82j2-j2ch-gfr8 (HIGH), GHSA-xgp8-3hg3-c2mh,
GHSA-965h-392x-2mh5 (LOW) in this workspace.
- ene-rds already has rustls-webpki 0.103.13 (patched); commit its
Cargo.lock for reproducible builds.
Generated with [Devin](https://cli.devin.ai/docs )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-05-19 08:09:34 +00:00
Brandon Schneider
edab29b0d5
Fix Porkbun DNS, automate postgres backups, fix rds_probe vulns
...
- Porkbun API keys verified working (SUCCESS ping)
- Automated daily AppFlowy postgres backups via systemd timer
- rds_probe: switch from rustls to native-tls (fixes 3 Dependabot alerts)
- ec2-config.nix: add appflowy-backup service and timer
2026-05-18 11:52:01 -05:00
Brandon Schneider
c5b6a31a8b
feat: add RDS probe tool, credential server, and Notion/Linear ingestion pipeline
...
New infrastructure components:
- rds_probe: Rust database inspection tool with IAM auth
- credential_server.py: REST credential provider server
- credential_provider.py: credential resolution chain
- ene_rds_fractal_fold.py / ene_rds_wiki_layer.py: RDS-backed ENE layers
- import_dumps_to_rds.py / export_linear_from_rds.py: ingestion pipeline
- recover_credential_server.sh: deployment script (sanitized)
Sanitize hardcoded secrets across codebase:
- Strip API keys from recover_credential_server.sh → env var lookups
- Replace hardcoded Wolfram appid (HYJE3R3R63) → env var in 5 scripts
- Strip fallback key values from config/index.js
- Add .claude/ and optimized_basis_v3.bin to .gitignore
Ingested 2,685 records into RDS: 2,421 Linear issues + 264 wiki pages
2026-05-18 00:31:44 -05:00
