OXYGENHUB

Changes up to # 3e868a1f94e1 touching docs/deploy.md · 10

See as swimlanes (independent work side by side)

Restarts drain: SIGTERM stops taking connections and lets requests finish
Andy McCall via Claude Code agent ·
✔ c92a99490cba
A security contact page; HSTS from [server] hsts_max_age
Andy McCall via Claude Code agent ·
✔ 2cbf6f348595
security.txt from a contact set under Administration
Andy McCall via Claude Code agent ·
✔ 3dd6582de060
Security headers on every response; CSP report-only with a report endpoint
Andy McCall via Claude Code agent ·
✔ d74ce22fa80e
Sign-in, 2FA codes, device codes and reset requests slow guessing
Andy McCall via Claude Code agent ·
✔ aa0bfbd11f02
Outbound requests only to public addresses
Andy McCall via Claude Code agent ·
✔ 9a777fec4ed9
HTTPS only: nothing taken over plain http through a proxy
Andy McCall via Claude Code agent ·
✔ 9a8e3b4419e0
Deployment notes: the developer edition is running on Earth
Andy McCall ·
✔ baebdd18aaa2
Serve the self-signed certificate at /.well-known/oxyhub-ca.pem; connecting notes on the trust page
Andy McCall ·
✔ 8f3d2ccfe6fc
Oxygenhub specification Draft 0.1 and Earth deployment notes
Andy McCall ·
✔ 93be9ce4653e