Marc-André Bombeck cefc8c15c1 fix(db): pin every connection to UTC and say so at boot when it is not ...

Stored times are UTC in timestamp columns without a zone, and Postgres
reads now(), CURRENT_TIMESTAMP and offset-free timestamptz parameters
through the session time zone. On a database whose default is not UTC
every expiry check ran off by the offset. The Prisma pool, pg-boss, the
lock and the maintenance connections now send TimeZone=UTC as a startup
option, or SET it on connect when the startup options are disabled for
a pooler. A boot check reads SHOW TimeZone and warns on anything else.

2026-10-11 12:15:03 +02:00

..

__tests__

fix(db): pin every connection to UTC and say so at boot when it is not

2026-10-11 12:15:03 +02:00

key-check.ts

Ask the newest values before the key check refuses

2026-10-04 01:58:04 +02:00

key-mismatch-refusal.ts

Refuse MCP and its OAuth endpoints while the encryption key does not match

2026-10-03 23:32:07 +02:00

key-mismatch-state.ts

Add ENCRYPTION_KEY_CHECK=warn as an escape hatch for the boot key check

2026-10-03 23:46:40 +02:00

readiness-summary.ts

fix(security): keep ALLOW_LOCAL_AI_PRIVATE_HOSTS=true for the operator's own AI, deprecated

2026-09-26 20:59:10 +02:00

time-zone-check.ts

fix(db): pin every connection to UTC and say so at boot when it is not

2026-10-11 12:15:03 +02:00