Commit History
-
Security Enhancements: Production WSGI, Rate Limiting, Security Headers, Secure Logging
- Added Gunicorn production WSGI server (replaces Flask dev server) - Implemented rate limiting with Flask-Limiter (10/min chat, 5/min initialize) - Added comprehensive security headers (10 headers including Phase 1 enhancements) - Implemented secure logging with file rotation and sensitive data sanitization - Added OMP_NUM_THREADS validation to prevent invalid environment variable errors - Added database indexes for performance optimization - Created production startup script with environment validation - Added security audit and check scripts - Updated Dockerfile for production deployment - Added security tools (Bandit, Safety) to requirements.txt - Created comprehensive security documentation and roadmap - Enhanced configuration management with secure defaults79ea999