release(v1.0.0): подготовить первый стабильный релиз Docker SQL Lab

.docker.env.example

@@ -6,10 +6,9 @@ MYSQL_VERSION=9.7.1
 POSTGRES_VERSION=18.4
 ADMINER_VERSION=5.4.2
 
-# Имена контейнеров
-MYSQL_CONTAINER=mysql
-POSTGRES_CONTAINER=postgres
-ADMINER_CONTAINER=adminer
+# Публикация портов только на loopback по умолчанию.
+# При необходимости можно явно указать другой адрес, например адрес VPN-интерфейса.
+BIND_ADDRESS=127.0.0.1
 
 # Порты хоста
 MYSQL_PORT=3306

.gitattributes

@@ -16,3 +16,15 @@
 *.conf text eol=lf
 *.ini text eol=lf
 *.make text eol=lf
+
+# Бинарные изображения и архивы
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.gif binary
+*.webp binary
+*.ico binary
+*.pdf binary
+*.zip binary
+*.gz binary
+*.tgz binary

.github/FUNDING.yml

@@ -0,0 +1,3 @@
+custom:
+  - "https://boosty.to/backendbezpafosa"
+  - "https://sponsr.ru/backendbezpafosa/"

.github/workflows/sql-lab-check.yml

@@ -27,6 +27,9 @@ jobs:
           docker --version
           docker compose version
 
+      - name: Test managed storage path validation
+        run: make test-storage-paths
+
       - name: Initialize environment
         run: make init
 
@@ -39,6 +42,9 @@ jobs:
       - name: Check complete database stand
         run: make check
 
+      - name: Smoke-test trusted SQL imports
+        run: make test-sql-imports
+
       - name: Confirm databases are running without Adminer
         run: |
           set -Eeuo pipefail
@@ -54,6 +60,38 @@ jobs:
       - name: Start Adminer
         run: make up-ui
 
+      - name: Confirm all published ports bind to loopback
+        run: |
+          set -Eeuo pipefail
+          set -a
+          source .docker.env
+          set +a
+
+          compose=(docker compose --env-file .docker.env -p "${COMPOSE_PROJECT_NAME}" --profile ui)
+
+          assert_loopback_binding() {
+            local service="$1"
+            local container_port="$2"
+            local container_id
+            local host_ip
+
+            container_id="$("${compose[@]}" ps --quiet "${service}")"
+            if [[ -z "${container_id}" ]]; then
+              echo "ERROR: Compose service ${service} has no container ID" >&2
+              exit 1
+            fi
+
+            host_ip="$(docker inspect --format "{{(index (index .NetworkSettings.Ports \"${container_port}/tcp\") 0).HostIp}}" "${container_id}")"
+            if [[ "${host_ip}" != "127.0.0.1" ]]; then
+              echo "ERROR: ${service} (${container_id}) publishes ${container_port}/tcp on HostIp '${host_ip}', expected '127.0.0.1'" >&2
+              exit 1
+            fi
+          }
+
+          assert_loopback_binding mysql 3306
+          assert_loopback_binding postgres 5432
+          assert_loopback_binding adminer 8080
+
       - name: Smoke-test Adminer login page
         run: |
           set -Eeuo pipefail

LICENSE.md

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-2026 Aleksandr Yurchenko
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.