Skip to content

operations.md

Latest commit

 

History

History
30 lines (24 loc) · 1.56 KB

operations.md

File metadata and controls

30 lines (24 loc) · 1.56 KB
Raw

Operations Guide

Observability

  • Configure BACKEND_SENTRY_DSN to capture backend exceptions.
  • Configure VITE_SENTRY_DSN to capture frontend runtime failures.
  • Review nexus.audit log entries for media.create, media.suggest, and chat activity.
  • Use GET /healthz for uptime and readiness checks.

Security Controls

  • Access tokens live in HttpOnly cookies and are rotated through /auth/refresh.
  • The suggestion endpoint is rate-limited per user and can use Redis for multi-instance enforcement.
  • Authentication rate limiting only trusts X-Forwarded-For from explicitly configured proxy IPs.
  • LLM-bound library context is scrubbed, masked, and wrapped in strict XML delimiters.
  • Chat history sent to Gemini is reduced to a recent window, scrubbed for prompt-injection markers, and PII-masked.
  • takeaway writes require TAKEAWAY_ENCRYPTION_KEY so sensitive notes are not persisted in plaintext.
  • Chat content is encrypted at rest when TAKEAWAY_ENCRYPTION_KEY is configured.
  • CI runs Ruff, pytest, Bandit, pip-audit, npm audit, and gitleaks.

Production Checklist

  • Set Supabase JWT expiry to 15 minutes.
  • Enable Supabase Point-in-Time Recovery (PITR).
  • Configure COOKIE_SECURE=true and COOKIE_DOMAIN for your production domain.
  • Configure TRUSTED_PROXY_IPS so auth throttling only trusts your reverse proxy tier.
  • Provide a stable TAKEAWAY_ENCRYPTION_KEY.
  • Provide a non-default AUDIT_LOG_SALT.
  • Configure REDIS_URL for distributed rate limiting.
  • Apply Terraform with live provider credentials and review generated infrastructure drift.