Files
flaskpaste/TASKLIST.md
2026-02-16 20:56:55 +01:00

3.8 KiB

Task List

Prioritized, actionable tasks. Each task is small and completable in one session.


Priority 1: Ecosystem

Status Task
Create Ansible deployment role

Completed

Date Task
2026-02 Add URL shortener (create, redirect, info, delete, list)
2025-01 Add CI/CD image build and push to Harbor
2025-01 Add Kubernetes manifests (Deployment, Service, ConfigMap)
2024-12 Add PKI usage examples (documentation/pki.md)
2024-12 Create CONTRIBUTING.md with development setup
2024-12 Fix all mypy type errors (now enforced in CI)
2024-12 Enhance CI with security-tests job, SBOM generation, memory checks
2024-12 Complete pentest remediation (CRYPTO-001, TIMING-001)
2024-12 Complete pentest remediation (HASH-001, ENUM-001)
2024-12 Complete pentest remediation (FLOOD-001, CLI-002, CLI-003, AUDIT-001)
2024-12 Complete pentest remediation (RATE-001, RATE-002, CLI-001)
2024-12 Complete pentest remediation (PROXY-001, BURN-001)
2024-12 Create comprehensive penetration testing plan
2024-12 Add systemd service unit example
2024-12 Add rate limit headers (X-RateLimit-*)
2024-12 Integrate PKI audit logging (CERT_ISSUED, CERT_REVOKED, AUTH_FAILURE)
2024-12 Integrate request duration metrics (Prometheus histogram)
2024-12 Add memory leak detection tests (tracemalloc)
2024-12 Add concurrent paste creation tests
2024-12 Add container deployment integration tests
2024-12 Add tiered auto-expiry (anon/untrusted/trusted)
2024-12 Add admin list all pastes (--all flag)
2024-12 Add batch delete with confirmation (--confirm N)
2024-12 Add admin rights for first PKI user
2024-12 Add public certificate registration endpoint
2024-12 Add CLI register command
2024-12 Implement anti-flood (dynamic PoW difficulty)
2024-12 Implement IP-based rate limiting
2024-12 Add scheduled cleanup (pastes, hashes, rate limits)
2024-12 Add CLI list/search/update/export commands
2024-12 Add CLI PoW retry (max 5 attempts)
2024-12 Add paste listing for authenticated users
2024-12 Implement minimal PKI (CA, issuance, revocation)
2024-12 Add security tooling (ruff, bandit, mypy, pip-audit)
2024-12 Create Makefile with dev workflow targets
2024-12 Setup CI/CD pipeline (Gitea Actions)
2024-12 Fix all ruff lint issues
2024-12 Optimize CI workflow (concurrency, job deps)
2024-12 Add PKI commands to CLI (status, issue, revoke)
2024-12 Implement burn-after-read option
2024-12 Implement custom expiry per paste
2024-12 Optimize Containerfile with multi-stage build
2024-12 Implement E2E encryption in CLI (AES-256-GCM)
2024-12 Implement entropy enforcement
2024-12 Add /client endpoint for CLI download
2024-12 Add URL prefix support
2024-12 Implement proof-of-work spam prevention
2024-12 Update documentation for v1.1.0
2024-12 Add HEAD method for paste endpoints
2024-12 Add SQLite WAL mode for better concurrency
2024-12 Implement content-hash deduplication
2024-12 Add X-Proxy-Secret validation
2024-12 Add X-Request-ID tracing
2024-11 Implement security headers
2024-11 Add client certificate authentication
2024-11 Create test suite

Task Guidelines

  • Tasks should be completable in < 2 hours
  • Each task results in one atomic commit
  • Mark ☑ when complete, move to Completed section
  • Remove tasks that become irrelevant
  • Pull new tasks from TODO.md as capacity allows