sysops
1fedd683e0
Stand: agent-06 (Audit-Log), agent-05 (Krankmeldung), agent-07 Phase 1 (Personalnummer), Busylight-Pull-Integration, TOTP/2FA, Abwesenheiten, Zeiterfassung, Kiosk-Grundgerüst. Migrations 0001–0023 deployed auf 192.168.1.137 + .164. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
30 lines
741 B
Python
30 lines
741 B
Python
"""Add tls_verify column to ldap_configs (H-07 security fix)
|
|
|
|
Revision ID: 0008_ldap_tls_verify
|
|
Revises: 0007_caldav_and_fixes
|
|
Create Date: 2026-03-27
|
|
|
|
Security fix H-07: make LDAP certificate validation configurable.
|
|
Default is False for backwards compatibility; set True in production
|
|
to enforce CERT_REQUIRED and prevent MITM attacks.
|
|
"""
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
|
|
|
|
revision = "0008_ldap_tls_verify"
|
|
down_revision = "0007_caldav_and_fixes"
|
|
branch_labels = None
|
|
depends_on = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
op.add_column(
|
|
"ldap_configs",
|
|
sa.Column("tls_verify", sa.Boolean(), nullable=False, server_default="false"),
|
|
)
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.drop_column("ldap_configs", "tls_verify")
|