DevEnv nis2-agileandClaude Opus 4.8
4d89b1e04b
database.php: Database::sslOptions() — TLS verso MySQL gated (env DB_SSL=true o flag-file application/config/.db_ssl_on), DEFAULT OFF. PDO::MYSQL_ATTR_SSL_CA + VERIFY_SERVER_CERT=false; fail-safe se CA assente (resta in chiaro + log: un VERIFY=false senza CA connetterebbe in chiaro silenziosamente). Merge con '+' (preserva chiavi-intere PDO). Default-OFF provato inerte (base + [] === base). Validato da 2 agenti: runtime app coperto 100% da Database::getInstance (0 raw PDO in application/); review adversariale = SICURO default-OFF, nessun bug. .gitignore: flag-file + db-ca.pem. Runbook: docs/TLS_DB_PREEQUIP_NIS2.md. NB topologia verificata: l'app usa il DB CONTAINER (db->172.21.0.4, 8.0.45), non il MySQL host -> CA + enforce vanno sul container db (a cura VIGILE). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
48 lines
568 B
Plaintext
48 lines
568 B
Plaintext
# Environment
|
|
.env
|
|
|
|
# Credentials
|
|
docs/credentials/
|
|
*.key
|
|
*.pem
|
|
|
|
# Uploads
|
|
public/uploads/
|
|
|
|
# Logs
|
|
logs/
|
|
*.log
|
|
|
|
# Dependencies
|
|
vendor/
|
|
node_modules/
|
|
|
|
# IDE
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
*.swo
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
desktop.ini
|
|
|
|
# Build
|
|
docker/data/
|
|
|
|
# Claude
|
|
.claude/plans/
|
|
.claude/memory/
|
|
|
|
# Backup files (qualsiasi posizione)
|
|
*.bak*
|
|
.backups/
|
|
|
|
# Chiavi SSH effimere — NON committare MAI chiavi private
|
|
.ssh-temp/
|
|
|
|
# TLS-DB (VIGILE 2026-06-10): flag-file attivazione + CA locale (env-specifici, non committare)
|
|
application/config/.db_ssl_on
|
|
application/config/db-ca.pem
|