-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
OpenTofu 5/8: Model and import Azure SQL, Storage and data-protection settings
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:hosting-automationScheduling, local/Azure hosting, secrets, and operations.Scheduling, local/Azure hosting, secrets, and operations.improvementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#628 In richardorchard/QueenZone.Modern;OpenTofu 6/8: Model and import Cloudflare DNS, TLS, Workers and Azure origin restrictions
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:hosting-automationScheduling, local/Azure hosting, secrets, and operations.Scheduling, local/Azure hosting, secrets, and operations.improvementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#626 In richardorchard/QueenZone.Modern;OpenTofu 8/8: Add plan/apply CI, drift detection, cutover verification and runbooks
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:hosting-automationScheduling, local/Azure hosting, secrets, and operations.Scheduling, local/Azure hosting, secrets, and operations.documentationImprovements or additions to documentationImprovements or additions to documentationimprovementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#625 In richardorchard/QueenZone.Modern;OpenTofu 4/8: Model and import Azure web, telemetry and ingress configuration
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:hosting-automationScheduling, local/Azure hosting, secrets, and operations.Scheduling, local/Azure hosting, secrets, and operations.improvementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#622 In richardorchard/QueenZone.Modern;OpenTofu 3/8: Add repository structure, provider pinning and production safety controls
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:hosting-automationScheduling, local/Azure hosting, secrets, and operations.Scheduling, local/Azure hosting, secrets, and operations.improvementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#619 In richardorchard/QueenZone.Modern;[Needs decision] OpenTofu 7/8: Define secret-safe App Service configuration ownership
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:hosting-automationScheduling, local/Azure hosting, secrets, and operations.Scheduling, local/Azure hosting, secrets, and operations.area:securitySecurity hardening, auth, headers, abuse preventionSecurity hardening, auth, headers, abuse preventionimprovementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#618 In richardorchard/QueenZone.Modern;OpenTofu 2/8: Bootstrap remote state and least-privilege workload identities
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:hosting-automationScheduling, local/Azure hosting, secrets, and operations.Scheduling, local/Azure hosting, secrets, and operations.improvementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#616 In richardorchard/QueenZone.Modern;Epic: Adopt OpenTofu for Azure and Cloudflare infrastructure
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:hosting-automationScheduling, local/Azure hosting, secrets, and operations.Scheduling, local/Azure hosting, secrets, and operations.enhancementNew feature or requestNew feature or requestepic:perf-security-reviewEpic: performance, architecture, and security improvements from 2026 reviewEpic: performance, architecture, and security improvements from 2026 reviewimprovementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#615 In richardorchard/QueenZone.Modern;Ops: Entra admin client secret renewal reminder (due by 2028-07-01)
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:hosting-automationScheduling, local/Azure hosting, secrets, and operations.Scheduling, local/Azure hosting, secrets, and operations.area:securitySecurity hardening, auth, headers, abuse preventionSecurity hardening, auth, headers, abuse preventiondocumentationImprovements or additions to documentationImprovements or additions to documentationimprovementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#597 In richardorchard/QueenZone.Modern;[Needs decision] Ops: Production disaster-recovery / restore runbook (RPO/RTO)
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:hosting-automationScheduling, local/Azure hosting, secrets, and operations.Scheduling, local/Azure hosting, secrets, and operations.documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestimprovementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#596 In richardorchard/QueenZone.Modern;Docs/Ops: Treat ForumData:UseModernForumReads=false as break-glass only
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:forumForum participation, posting, moderation featuresForum participation, posting, moderation featuresarea:hosting-automationScheduling, local/Azure hosting, secrets, and operations.Scheduling, local/Azure hosting, secrets, and operations.documentationImprovements or additions to documentationImprovements or additions to documentationimprovementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#595 In richardorchard/QueenZone.Modern;Reliability: Make photo-submission promotion blob upload and DB write consistent
architecture-review-2026-08Findings from the 2026-08 architecture/performance/security reviewFindings from the 2026-08 architecture/performance/security reviewarea:content-submissionUser-submitted photos, articles, news suggestionsUser-submitted photos, articles, news suggestionsarea:media-uploadsBlob storage, file and image upload infrastructureBlob storage, file and image upload infrastructureenhancementNew feature or requestNew feature or requestimprovementSuggested improvement from architecture/performance/security reviewSuggested improvement from architecture/performance/security reviewStatus: Open.#590 In richardorchard/QueenZone.Modern;