hsiegeln f81cd740b7 fix: security hardening — remove dead routes, add JWT audience validation ...

- Remove broken observe/dashboard Traefik routes (server accessed via /server only)
- Remove unused acme volume
- Add JWT audience claim validation (https://api.cameleer.local) in SecurityConfig
- Secure bootstrap output file with chmod 600
- Add dev-only comments on TLS_SKIP_VERIFY and credential logging

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 19:15:03 +02:00

.gitea/workflows

ci: use --no-cache for Docker builds, remove registry cache

2026-04-06 15:59:29 +02:00

.mvn/wrapper

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

docker

fix: security hardening — remove dead routes, add JWT audience validation

2026-04-06 19:15:03 +02:00

docs

docs: update architecture for custom sign-in UI and CI pipeline

2026-04-06 16:29:37 +02:00

src

fix: security hardening — remove dead routes, add JWT audience validation

2026-04-06 19:15:03 +02:00

ui

fix: restore multi-stage Dockerfiles, use cameleer-docker-builder

2026-04-06 15:51:59 +02:00

.env.example

fix: register API resource in Logto for JWT access tokens

2026-04-05 01:01:32 +02:00

.gitattributes

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

.gitignore

chore: add .worktrees to .gitignore

2026-04-04 17:26:22 +02:00

CLAUDE.md

fix: security hardening — remove dead routes, add JWT audience validation

2026-04-06 19:15:03 +02:00

docker-compose.dev.yml

fix: remove local bind mounts from dev override

2026-04-06 16:18:39 +02:00

docker-compose.yml

fix: security hardening — remove dead routes, add JWT audience validation

2026-04-06 19:15:03 +02:00

Dockerfile

fix: restore multi-stage Dockerfiles, use cameleer-docker-builder

2026-04-06 15:51:59 +02:00

HOWTO.md

feat: add SPA controller, Traefik route, CI frontend build, and HOWTO update

2026-04-04 22:06:36 +02:00

mvnw

fix: set execute permission on Maven wrapper

2026-04-04 15:34:52 +02:00

mvnw.cmd

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

pom.xml

feat: add Phase 3 dependencies and configuration

2026-04-04 17:29:06 +02:00

STRATEGY.md

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

traefik.yml

fix: root → /platform/ redirect via Traefik file config

2026-04-05 23:30:38 +02:00

Description

Multi-tenant SaaS platform — Camel application runtime with built-in observability. Wraps cameleer3 agent + server.

8.2 MiB

Languages

Java 59.5%

TypeScript 29.3%

Shell 9.3%

Dockerfile 0.9%

CSS 0.8%

Other 0.2%