mivanchenko 3ab3a6a4f4 Trust Caddy as a proxy in Waitress so forwarded headers reach Flask ...

Root cause of the ICS-link-uses-http bug (#22): Caddy was already
sending X-Forwarded-Proto/-Host/-For correctly (confirmed via the
Caddy admin API's compiled route config), but Waitress strips
untrusted X-Forwarded-* headers by default before they ever reach
the WSGI environ -- so the earlier ProxyFix middleware had nothing
to read. This was the actual fix; ProxyFix was necessary but not
sufficient.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-12 00:12:04 +02:00

..

static

Remove Google Sheets mirror entirely (#13)

2026-08-04 11:29:57 +02:00

templates

Per-client ICS calendar feed, replacing the shared ICS_TOKEN (#22)

2026-08-04 11:55:35 +02:00

tests

Upsert keyed entities on POST /api/<entity> (#1)

2026-08-04 13:42:00 +02:00

app.py

Trust Caddy as a proxy in Waitress so forwarded headers reach Flask

2026-09-12 00:12:04 +02:00

availability.py

Availability engine + booking API: create/cancel/reschedule (#16)

2026-07-23 14:52:33 +02:00

booking_api.py

Owner notification webhook: Telegram re-point (#23)

2026-08-04 12:09:39 +02:00

booking_db.py

Per-client ICS calendar feed, replacing the shared ICS_TOKEN (#22)

2026-08-04 11:55:35 +02:00

booking_mail.py

Booking confirmation email + customer self-service cancel/reschedule (#18)

2026-07-23 15:40:45 +02:00

db.py

New-client onboarding: provision resources/services/owner login, drop EA (#24)

2026-08-04 13:11:38 +02:00

Dockerfile

Back office: one-way DB -> Sheets mirror

2026-06-25 09:26:42 +02:00

mailer.py

Remove Google Sheets mirror entirely (#13)

2026-08-04 11:29:57 +02:00

manage_booking.py

Booking confirmation email + customer self-service cancel/reschedule (#18)

2026-07-23 15:40:45 +02:00

owner_auth.py

Owner calendar view + manual booking + owner cancel/reschedule (#20)

2026-08-03 17:16:19 +02:00

owner_booking.py

Owner calendar view + manual booking + owner cancel/reschedule (#20)

2026-08-03 17:16:19 +02:00

owner_mail.py

Owner accounts: auth, password reset, CRM dashboard visibility (#19)

2026-08-03 17:00:37 +02:00

owner_notify.py

Owner notification webhook: Telegram re-point (#23)

2026-08-04 12:09:39 +02:00

owner_settings.py

Per-client ICS calendar feed, replacing the shared ICS_TOKEN (#22)

2026-08-04 11:55:35 +02:00

public_booking.py

Public booking page + iframe embed (#17)

2026-07-23 15:15:29 +02:00

requirements-dev.txt

Booking schema + tenancy-safe data-access module (#15)

2026-07-23 14:28:06 +02:00

requirements.txt

Remove Google Sheets mirror entirely (#13)

2026-08-04 11:29:57 +02:00