Release version v1.2.0

.dclintrc

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://raw.githubusercontent.com/zavoloklom/docker-compose-linter/refs/heads/main/schemas/linter-config.schema.json",
+  "rules": {
+    "services-alphabetical-order": 0,
+    "require-quotes-in-ports": [
+      1,
+      {
+        "quoteType": "double"
+      }
+    ]
+  },
+  "quiet": false,
+  "debug": true
+}

.env.development.sample

@@ -0,0 +1,28 @@
+NAME=database
+ENVIRONMENT=development
+
+HOST=local.solarbuildingenvelopes.com
+SUBDOMAIN=www
+HTTP_PORT=8500
+HTTPS_PORT=7501
+
+METABASE_HOST=www.local.buildingenvelopedata.org
+METABASE_HTTPS_PORT=7001
+
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=postgres
+POSTGRES_DATABASE_NAME=xbase
+
+DATABASE_ID=8a27aa0d-6026-4124-b185-4efd5cead953
+OPERATOR_ID=82b9f95c-3261-463a-90fe-0e9da707af17
+
+OPEN_ID_CONNECT_CLIENT_ID=testlab-solar-facades
+OPEN_ID_CONNECT_CLIENT_SECRET=secret
+
+OPEN_TELEMETRY_HOST=host.docker.internal
+OPEN_TELEMETRY_GRPC_PORT=4517
+
+VERIFICATION_CODE=secret
+
+GNUPG_SECRET_SIGNING_KEY_FINGERPRINT=
+GNUPG_SECRET_SIGNING_KEY_PASSPHRASE=passphrase

.env.production.sample

@@ -1,15 +1,27 @@
 NAME=database_production
+ENVIRONMENT=production
+TARGET=
 
-HOST=www.solarbuildingenvelopes.com
+HOST=solarbuildingenvelopes.com
+SUBDOMAIN=www
 HTTP_PORT=8000
 
 METABASE_HOST=www.buildingenvelopedata.org
 
-ACCESS_TOKEN=
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=
+POSTGRES_DATABASE_NAME=xbase
+
+DATABASE_ID=8a27aa0d-6026-4124-b185-4efd5cead953
+OPERATOR_ID=82b9f95c-3261-463a-90fe-0e9da707af17
+
+OPEN_ID_CONNECT_CLIENT_ID=testlab-solar-facades
 OPEN_ID_CONNECT_CLIENT_SECRET=
 
-SMTP_HOST=mail-mtaKA26.fraunhofer.de
-SMTP_PORT=25
-RELAY_SMTP_HOST=
-RELAY_SMTP_PORT=25
-RELAY_ALLOWED_EMAILS=
+OPEN_TELEMETRY_HOST=host.docker.internal
+OPEN_TELEMETRY_GRPC_PORT=4317
+
+VERIFICATION_CODE=
+
+GNUPG_SECRET_SIGNING_KEY_FINGERPRINT=
+GNUPG_SECRET_SIGNING_KEY_PASSPHRASE=

.env.staging.sample

@@ -1,15 +1,27 @@
 NAME=database_staging
+ENVIRONMENT=staging
+TARGET=
 
-HOST=staging.solarbuildingenvelopes.com
+HOST=solarbuildingenvelopes.com
+SUBDOMAIN=staging
 HTTP_PORT=9000
 
 METABASE_HOST=staging.buildingenvelopedata.org
 
-ACCESS_TOKEN=
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=
+POSTGRES_DATABASE_NAME=xbase
+
+DATABASE_ID=8a27aa0d-6026-4124-b185-4efd5cead953
+OPERATOR_ID=82b9f95c-3261-463a-90fe-0e9da707af17
+
+OPEN_ID_CONNECT_CLIENT_ID=testlab-solar-facades
 OPEN_ID_CONNECT_CLIENT_SECRET=
 
-SMTP_HOST=email
-SMTP_PORT=25
-RELAY_SMTP_HOST=mail-mtaKA26.fraunhofer.de
-RELAY_SMTP_PORT=25
-RELAY_ALLOWED_EMAILS=
+OPEN_TELEMETRY_HOST=host.docker.internal
+OPEN_TELEMETRY_GRPC_PORT=4317
+
+VERIFICATION_CODE=
+
+GNUPG_SECRET_SIGNING_KEY_FINGERPRINT=
+GNUPG_SECRET_SIGNING_KEY_PASSPHRASE=

.gitattributes

@@ -0,0 +1 @@
+*.large.* filter=lfs diff=lfs merge=lfs -text

.github/workflows/dotnet.yml → .github/workflows/dotnet.yaml

@@ -16,7 +16,7 @@ jobs:
     - name: Setup .NET
       uses: actions/setup-dotnet@v1
       with:
-        dotnet-version: 5.0.x
+        dotnet-version: 7.0.x
     - name: Restore dependencies
       working-directory: ./backend
       run: dotnet restore

.github/workflows/label-issues.yaml

@@ -0,0 +1,23 @@
+# Inspired by https://docs.github.com/en/actions/managing-issues-and-pull-requests/adding-labels-to-issues
+
+name: Label issues
+on:
+  issues:
+    types:
+      - reopened
+      - opened
+jobs:
+  label_issues:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+    steps:
+      - uses: actions/github-script@v6
+        with:
+          script: |
+            github.rest.issues.addLabels({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              labels: ["triage"]
+            })

.gitignore

@@ -1,13 +1,12 @@
+/Makefile
+/docker-compose.yaml
+*/Dockerfile
 /examples/*.json
-/secrets
-/ssl
 /machine/*.retry
 /nginx/html/maintenance.html
-/commit
-/backup
-
-.env
-.vscode
+/tags*
+/.deploy-history
+/.env
 
 # Compiled output
 dist
@@ -25,6 +24,9 @@ coverage
 
 # Backups
 *.bak
+/backup
+/backups
+/.content-addressable-storage
 
 # Image Diagrams
 /diagrams/*.png

.hadolint.yaml

@@ -0,0 +1,4 @@
+ignored:
+  - DL3008
+
+strict-labels: true

.psqlrc

@@ -0,0 +1,4 @@
+\x auto
+\pset linestyle unicode
+\pset null '∅'
+\set QUIET 1

CHANGELOG.md

@@ -7,8 +7,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-## [v1.0.0] - 2022-02-28
-
 ### Added
 
 -
@@ -121,6 +119,30 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 -
 -
 
-[Unreleased]: https://github.com/building-envelope-data/database/compare/v1.0.0...HEAD
+## [v1.2.0] - 2026-06-30
+
+### Added
+
+- Add GraphQL query `verificationCode` [5dd0a94bcfbd3de69a3b29f0a07be406617fbf83](https://github.com/building-envelope-data/database/commit/5dd0a94bcfbd3de69a3b29f0a07be406617fbf83)
+- Add pages for individual data entries [6e1a5a484b2054e0eca168fe58b4860caef8d872](https://github.com/building-envelope-data/database/commit/6e1a5a484b2054e0eca168fe58b4860caef8d872)
+- Enable automatic persisted queries [f1f7a73f3001bc89d429b103b360ccd36ea32e0d](https://github.com/building-envelope-data/database/commit/f1f7a73f3001bc89d429b103b360ccd36ea32e0d)
+- Login through the OpenId Connect endpoints of the metabase [#44](https://github.com/building-envelope-data/database/pull/44)
+
+### Changed
+
+- Upgrade packages to latest compatible versions in backend and frontend [#29](https://github.com/building-envelope-data/database/pull/29)
+- Persist data protection keys in database [bbac9c7e84a21dcc67bc5a9446032b862af51b5b](https://github.com/building-envelope-data/database/commit/bbac9c7e84a21dcc67bc5a9446032b862af51b5b)
+- Build Docker images with BuildKit [4ce5fa2c4dbe67de14f5e1c9be22896921349b50](https://github.com/building-envelope-data/database/commit/4ce5fa2c4dbe67de14f5e1c9be22896921349b50)
+- Improve OpenId Connect usage and security [#46](https://github.com/building-envelope-data/database/pull/46)
+- Do not manage JWT keys and GnuPG keys in files. JWT keys are created and rotated by the C# webserver daily. GnuPG keys are manually managed within the shell `make manage` and stored in the volume `gnupg`.
+- Use `forge.mk` to build and push images to the server noting the image tag, which is just the commit hash. On the server use `deploy.mk deploy TARGET=<the-commit-hash>` to deploy backend and frontend based on those images.
+
+### Fixed
+
+- Remove explicit content-type as it results in requests from banana cake pop responding with 404 in commit [90ee575397544158a603cd7946bd6fec5e4c1407](https://github.com/building-envelope-data/database/commit/90ee575397544158a603cd7946bd6fec5e4c1407)
+
+## [v1.0.0] - 2022-02-28
 
-[v1.0.0]: https://github.com/building-envelope-data/database/compare/d45f78d150b58e016d63a827124b740765c4d350...v1.0.0
+[Unreleased]: https://github.com/building-envelope-data/database/compare/v1.2.0...HEAD
+[v1.2.0]: https://github.com/building-envelope-data/database/compare/v1.0.0...v1.2.0
+[v1.0.0]: https://github.com/building-envelope-data/database/compare/352f44e492ca66d7835970cdf007b2897e686e30...v1.0.0

Dockerfile.build-context

@@ -0,0 +1,9 @@
+# syntax=docker/dockerfile:1.21
+# check=error=true
+# Available versions are listed on https://hub.docker.com/r/docker/dockerfile
+
+FROM busybox:1.37
+
+RUN mkdir /tmp/build/
+COPY . /tmp/build/
+RUN find /tmp/build/