From 0704924aa8c8d434c587d262b9e60888ea812e26 Mon Sep 17 00:00:00 2001 From: Mark Gregory Date: Sat, 12 Sep 2026 20:22:45 +0100 Subject: [PATCH] updates --- IMPLEMENTATION.md | 16 ---------------- SECURITY.md | 12 ------------ deploy.php | 4 ++-- 3 files changed, 2 insertions(+), 30 deletions(-) delete mode 100644 IMPLEMENTATION.md delete mode 100644 SECURITY.md diff --git a/IMPLEMENTATION.md b/IMPLEMENTATION.md deleted file mode 100644 index ea74cd8..0000000 --- a/IMPLEMENTATION.md +++ /dev/null @@ -1,16 +0,0 @@ -# Production implementation map - -## Included foundation -Public marketplace UI, responsive DJ search/profile, enquiry flow, role-ready user/business models, bookings/reviews schema, admin dashboard shell, API route, consent UI, legal placeholders, Stripe/Cashier dependencies, Redis-ready environment, generated design reference. - -## Next production modules -1. Install Laravel 13 framework/vendor files with Composer. -2. Add Laravel starter auth (Fortify/Livewire) and verified email + 2FA. -3. Publish/configure Spatie Permission and Media Library migrations. -4. Add Business/DJ CRUD with policies, moderation and private verification documents. -5. Add quotes, quote items, availability, booking state machine, conversations/messages. -6. Add Cashier + Stripe Connect onboarding, deposits, refunds, payouts and webhook idempotency. -7. Add database/email/push notification preferences and queued notifications. -8. Add support ticketing, reports, audit viewer, privacy export/delete workflow. -9. Add full feature/policy/payment tests and browser accessibility tests. -10. Replace demo remote imagery with generated/owned image set and wire image derivatives/CDN. diff --git a/SECURITY.md b/SECURITY.md deleted file mode 100644 index e6e2c8e..0000000 --- a/SECURITY.md +++ /dev/null @@ -1,12 +0,0 @@ -# Security baseline -- Enforce HTTPS/HSTS in production. -- Keep private/verification uploads outside public storage; authorize every download. -- Validate MIME and image decoding; strip metadata where appropriate. -- Use policies for every tenant-owned resource. -- Enable 2FA for admin/DJ accounts. -- Verify Stripe webhook signatures and make handlers idempotent. -- Rate-limit auth, enquiry, review and messaging endpoints. -- Audit privileged actions; hash IP addresses if retained. -- Never store card details. -- Run queues under Supervisor/systemd and keep dependencies patched. -- Replace placeholder legal policies before launch. diff --git a/deploy.php b/deploy.php index 7d71916..91ef963 100644 --- a/deploy.php +++ b/deploy.php @@ -22,13 +22,13 @@ host('main') ->set('hostname', '217.154.47.197') ->set('remote_user', 'mag') ->set('branch', 'main') - ->set('deploy_path', '/var/www/rsyncstudio'); + ->set('deploy_path', '/var/www/beatbook'); host('stage') ->set('hostname', 'pegasus.absdev.net') ->set('remote_user', 'mag') ->set('branch', 'stage') - ->set('deploy_path', '/var/www/rsyncstudio'); + ->set('deploy_path', '/var/www/beatbook'); task('build', function (): void { run('export NVM_DIR="$HOME/.nvm" && [ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" && nvm use {{node_version}} && cd {{release_path}} && npm ci --no-audit --no-fund');