Files
felhom.eu/documentation/audits/new-app-checklist-2026-10-01/C/walk2-console.log
T
admin 2d69c61556
gates / gates (push) Successful in 27s
New-app checklist: the pilot audit (wger as of 2026-09-29 and now, two 9202 walks), R-758..R-764 opened; STATUS, CONTEXT, report
The operator's request of 2026-10-01 recorded in CONTEXT with the reviewer's defaults (new apps only; the 53 get a
read-only gap page). The pilot: the draft caught R-752 and R-755, missed R-737 and (for a new app) R-738; the
sharpened and new rows then found R-762 (wger serves no static files or photos), R-763 (strangers sign up, guest
accounts), R-764 (no mail). Also R-758 (8 mem_limit under the sum), R-759 (wger's open record rows), R-760
(vikunja healthcheck), R-761 (logo comment). R-755 note. Register 392 -> 399.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-01 15:22:05 +02:00

61 lines
4.7 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
##### wger second walk — controller gitea.dooplex.hu/admin/felhom-controller:0.285.0 catalog e9f50b5 calibre-web: the admin login name is generated at install (09 decision 61, R-752)
15:11:29 [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['ADMIN_PASSWORD']
15:11:29 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}
15:13:00 [1] deployed, controller state=running, pinned={'wger': 'wger/server:2.7'}
deploy -> True
household admin signs in (the admin exists, the setup is done): ok
== 3.4 a STRANGER, after the setup — no dashboard session, no gate cookie, through traefik
wger source: where registration and guests are decided:
/home/wger/src/wger/utils/context_processor.py:36: 'allow_registration': settings.WGER_SETTINGS.get('ALLOW_REGISTRATION', False),
/home/wger/src/wger/utils/middleware.py:63: settings.WGER_SETTINGS['ALLOW_GUEST_USERS']
/home/wger/src/wger/core/views/misc.py:55: if not settings.WGER_SETTINGS['ALLOW_GUEST_USERS']:
/home/wger/src/wger/core/views/user.py:291: if not settings.WGER_SETTINGS['ALLOW_REGISTRATION']:
/home/wger/src/wger/core/account_adapter.py:36: return settings.WGER_SETTINGS['ALLOW_REGISTRATION']
/home/wger/src/wger/software/views.py:74: context['allow_registration'] = settings.WGER_SETTINGS['ALLOW_REGISTRATION']
/home/wger/src/wger/software/views.py:75: context['allow_guest_users'] = settings.WGER_SETTINGS['ALLOW_GUEST_USERS']
GET /en/user/registration -> 200 form fields: ['csrfmiddlewaretoken', 'email', 'language', 'next', 'password1', 'password2', 'username', 'viewport']
POST /en/user/registration as stranger272284 -> 302; form errors: []
the stranger then signs in with that account -> 302 (302 = IN)
and reads the API as that user -> 200
the app's own user list now (admin's view, count only): 2 ['admin', 'stranger']
-- guests: wger's own 'try as guest' path, as a stranger
/home/wger/src/wger/core/views/user.py:283: closed" page), and temporary (guest) users may still reach the
/home/wger/src/wger/core/views/user.py:787: allauth's login view, with one wger carve-out: temporary (guest) users are
/home/wger/src/wger/utils/context_processor.py:55: # Flag for guest users
/home/wger/src/wger/utils/middleware.py:29:from wger.core.demo import create_temporary_user
/home/wger/src/wger/utils/middleware.py:43: # Don't create guest users for requests that are accessing the site
/home/wger/src/wger/utils/middleware.py:68: logger.debug('creating a new guest user now')
/home/wger/src/wger/utils/middleware.py:69: user = create_temporary_user(request)
GET /en/user/demo-entries as a stranger -> 500
GET /en/dashboard as a stranger -> 200
users after the guest tries: 4 ['2167c0bc', '792dae77', 'admin', 'stranger']
== 2.8 the uploaded photo: on the volume? who serves /media/?
POST /api/v2/gallery/ -> 201 image path: /media/gallery/1/e91d6ece-866d-44c7-9e3f-1a6db6a6107b.png
the file on the media volume: -rw-r--r-- 1 wger wger 70 Oct 1 15:13 /home/wger/media/gallery/1/e91d6ece-866d-44c7-9e3f-1a6db6a6107b.png
GET it through traefik, signed in -> 404
inside the container, straight at runserver (no traefik): HTTP Error 404: Not Found
wger's urls.py on /media and /static: 350: 'api/v2/min-server-version/',
352: name='min_server_version',
393:# URL for user uploaded files, served like this during development only
396: urlpatterns += static(settings.MEDIA_URL, document_root=settings.MEDIA_ROOT)
whitenoise / static middleware in settings: /home/wger/src/settings/ci.py:117:MEDIA_ROOT = '/tmp/'
/home/wger/src/settings/main.py:142:MEDIA_ROOT = env.str('DJANGO_MEDIA_ROOT', '/home/wger/media')
/home/wger/src/settings/main.py:143:STATIC_ROOT = env.str('DJANGO_STATIC_ROOT', '/home/wger/static')
/home/wger/src/settings/settings_global.py:48:MEDIA_ROOT = BASE_DIR.parent / 'media'
/home/wger/src/settings/settings_global.py:49:STATIC_ROOT = BASE_DIR.parent / 'static'
upstream's own production compose serves /media with nginx — the image's docs: celery
Dockerfile
entrypoint.sh
README.md
== 1.7 static files (collectstatic needs DJANGO_DEBUG == "False"; the template sets none)
static refs on the login page: ['/static/css/workout-manager.css', '/static/bootstrap-compiled.css', '/static/css/bootstrap-custom.css']
GET /static/css/workout-manager.css -> 404 (2830 chars)
GET /static/bootstrap-compiled.css -> 404 (2830 chars)
static root inside the container: 4.0K /home/wger/static
remove WITH data -> 200 {'ok': True, 'data': {'removed': 'wger', 'volumes_removed': ['wger_wger_data', 'wger_wger_media'], 'hdd_paths_removed': [], 'hdd_paths_preserved': [], 'hdd_note': 'Az alkalmazás nem tárolt saját adato
left after: stack dir / containers / volumes: /opt/docker/stacks/wger