Initial commit – TimeMaster Zeiterfassung & HR-Tool

Stand: agent-06 (Audit-Log), agent-05 (Krankmeldung), agent-07 Phase 1 (Personalnummer), Busylight-Pull-Integration, TOTP/2FA, Abwesenheiten, Zeiterfassung, Kiosk-Grundgerüst. Migrations 0001–0023 deployed auf 192.168.1.137 + .164. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 20:03:27 +02:00
commit 1fedd683e0
178 changed files with 29896 additions and 0 deletions
@@ -0,0 +1,29 @@
+"""Add tls_verify column to ldap_configs (H-07 security fix)
+
+Revision ID: 0008_ldap_tls_verify
+Revises: 0007_caldav_and_fixes
+Create Date: 2026-03-27
+
+Security fix H-07: make LDAP certificate validation configurable.
+Default is False for backwards compatibility; set True in production
+to enforce CERT_REQUIRED and prevent MITM attacks.
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0008_ldap_tls_verify"
+down_revision = "0007_caldav_and_fixes"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "ldap_configs",
+        sa.Column("tls_verify", sa.Boolean(), nullable=False, server_default="false"),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("ldap_configs", "tls_verify")