Harden the public dashboard: id bounds, read-only role, error and worker redaction, log rotation by MaciejZiel · Pull Request #19 · MaciejZiel/pgqueue

MaciejZiel · 2026-10-14T00:09:04Z

Supersedes #18 (same commits rebased onto main after #17).

ids in /api/jobs/{id} and before_id are bounded to 1..2^63-1 (422 instead of 500)
the boot script log is size-capped by deploy/termux/logcap.sh (default 1 MiB, 2 old files)
setup-db.sh: SELECT-only role pgqueue_demo_ro, connection limits (40 / 10), REVOKE CONNECT FROM PUBLIC; read-only app uses PGQUEUE_READONLY_DSN
public API returns only the last error line without absolute paths and a stable worker label (no hostname/pid); full detail stays in the DB and the non-read-only admin

Tests added for each point.

… dashboard

…ad-only DSN to create_app

… to setup-db.sh

MaciejZiel added 7 commits October 14, 2026 02:07

Show only the last error line and a stable worker label on the public…

165d1a5

… dashboard

Reject ids outside the bigint range with 422 instead of a 500; add re…

54fc7a9

…ad-only DSN to create_app

Let the demo's public dashboard connect with a separate read-only DSN

a2c5ad1

Cap the demo log with size-based rotation instead of appending forever

24f3ea3

Add a SELECT-only database role, connection limits and REVOKE CONNECT…

b7b2184

… to setup-db.sh

Test the read-only DSN and the database setup script

637a2be

Document the public API redaction, read-only role and log rotation

60a88c0

MaciejZiel merged commit 2447a0f into main Oct 14, 2026
5 checks passed

MaciejZiel deleted the harden-public-dashboard-v2 branch October 14, 2026 21:33

Navigation Menu