القائمة
Apply project-specific security and privacy guardrails (auth, headers, rate limiting, logging). Use when touching authentication, request handling, metrics exposure, or anything that could leak sensitive data.
Run mjr.wtf locally using Docker Compose (SQLite), including migrations, logs, and teardown.
Operate and validate mjr.wtf observability endpoints (/health, /metrics) and logging-related behavior. Use when adding metrics, changing auth around metrics, or debugging production-like issues.
Run, debug, and structure tests for this Go project (unit + integration), including generation prerequisites. Use when changing domain logic, repositories, HTTP handlers, or migrations.
Run and extend the end-to-end HTTP integration tests (SQLite in-memory) for mjr.wtf, covering auth, create/list/delete, redirects, and analytics. Use when changing handlers, middleware, or API contracts.
Run and troubleshoot project code generation (sqlc + templ).
Configure mjr.wtf safely via environment variables and .env files.
| name | security-basics |
| description | Apply project-specific security and privacy guardrails (auth, headers, rate limiting, logging). Use when touching authentication, request handling, metrics exposure, or anything that could leak sensitive data. |
| license | MIT |
| compatibility | Applies to the mjrwtf Go server; requires bash and git for repo work. |
| metadata | {"repo":"mjrwtf","runner":"github-copilot-cli","version":1.3} |
| allowed-tools | Bash(git:*) Bash(go:*) Bash(make:*) Read |
make targets when available; fall back to direct CLI commands when needed.AUTH_TOKENS (preferred; comma-separated) or AUTH_TOKEN (legacy; single token).X-Forwarded-For / X-Real-IP./metrics may be public by default; enable protection when needed via METRICS_AUTH_ENABLED=true.ALLOWED_ORIGINS) are appropriate for production.SECURE_COOKIES=true) when behind HTTPS.