ulthran / ctbus_site

A site for ctbus

About

This is a personal website for Charlie Bushman.

https://charliebushman.com

Deployment

It is deployed as a serverless flask site using zappa on AWS.

• git clone [email protected]:Ulthran/ctbus_site.git && cd ctbus_site
• python -m venv env
• source env/bin/activate
• pip install -r requirements.txt
• pip install -r dev-requirements.txt (for testing and development)
• zappa deploy
• zappa update (to update a previously deployed app)
• zappa tail (to see logs)

To run locally,

• source env/bin/activate
• export FLASK_DEBUG=1 && flask --app app/app run

And go to the address given.

Some environment variables are defined in zappa_settings.json but others are secret and are defined in a json file uploaded to a bucket defined by remote_env. For local deployments, just put everything in a .env file.

Contributing

If you have thoughts on how I could improve the site, I'd love to hear them. It is, for now and the foreseeable future, pretty simplistic in design, but I will also be using it as a testing ground for anything in the web app arena I want to learn more about.

Security Vulnerabilities

If you discover a security vulnerability, please send an e-mail to me via [email protected].

License

This site is open-sourced software licensed under the MIT license.

ctbus_site's Issues

Add Latenite article

Add initial Prefect article

CD pipeline writeup

Add QKD article

Add Schmidt decomposition article

PCMP status dashboard

List all projects, github links, deployments, badges

https://api.github.com/repos/Ulthran/ctbus_site/actions/workflows

Migrate PCMP Dashboard content loading to JS (from Python)

JS async should be better and allow the page to load immediately

Can also consider loading blank project cards then using a secondary call to another route to load the data into them (to avoid JS shenanigans)

Add blog

Add more PCMP content

Add Work tab

Add a page to display past and current jobs/internships (same format as projects)

Add chaos and fractals article

Add chess.com league trophy

Add usage statistics

https://flask.palletsprojects.com/en/2.3.x/api/#flask.Flask.before_request

Make sure to include disclaimer banner about what info is collected

Add trebuchet article

Setup CDN on S3 backend

Even just grabbing the thumbnails from S3 is too slow, need to layer a CDN on top

https://stackoverflow.com/questions/10656862/why-are-my-amazon-s3-images-loading-slow

Consider switching link tests to use `wget --spider` instead of `requests`

There just doesn't seem to be a reliable way to do this... Maybe consider compiling a nice report instead of throwing errors?

Something with sound

ZAP Scan Baseline Report

• Site: https://cjg5wanye9.execute-api.us-east-1.amazonaws.com
  New Alerts
  • CSP: Wildcard Directive [10055] total: 4:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
  • CSP: script-src unsafe-inline [10055] total: 4:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
  • CSP: style-src unsafe-inline [10055] total: 4:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
  • Permissions Policy Header Not Set [10063] total: 11:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 10:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 11:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 9:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Modern Web Application [10109] total: 1:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/projects/comps
  • Non-Storable Content [10049] total: 3:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/robots.txt
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/sitemap.xml
  • Re-examine Cache-control Directives [10015] total: 9:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Storable and Cacheable Content [10049] total: 6:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/projects
    • ..
  • Storable but Non-Cacheable Content [10049] total: 1:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/static/js/MG.js

View the following link to download the report.
RunnerID:8258090122

Add piano snippets

Testing for dev site deployment

Garmin vs Whoop analysis

https://developer.garmin.com/fit/overview/
https://developer.whoop.com/api/

Switch backend to DynamoDB

S3 is too slow and a little annoying to work with, dynamo will be faster and enable things like easier sorting

Probably makes sense to keep stuff like pdfs, mp4s, and pptxs in S3 with urls in dynamo

Fix www.charliebushman.com

Add charliebushman.com/resume redirect

Make SVGs into macros

Make them reusable and unclutter HTML files

ZAP Scan Baseline Report

• Site: https://cjg5wanye9.execute-api.us-east-1.amazonaws.com
  New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 8:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Missing Anti-clickjacking Header [10020] total: 8:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Sub Resource Integrity Attribute Missing [90003] total: 11:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Cross-Domain JavaScript Source File Inclusion [10017] total: 4:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/projects/comps
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/projects/comps
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/projects/comps
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/projects/comps
  • Permissions Policy Header Not Set [10063] total: 10:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Strict-Transport-Security Header Not Set [10035] total: 8:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • ..
  • X-Content-Type-Options Header Missing [10021] total: 10:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Information Disclosure - Suspicious Comments [10027] total: 8:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Modern Web Application [10109] total: 1:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/projects/comps
  • Non-Storable Content [10049] total: 3:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/robots.txt
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/sitemap.xml
  • Re-examine Cache-control Directives [10015] total: 8:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Storable and Cacheable Content [10049] total: 6:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/certifications
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/music
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/pcmp
    • ..
  • Storable but Non-Cacheable Content [10049] total: 1:
    • https://cjg5wanye9.execute-api.us-east-1.amazonaws.com/dev/static/js/MG.js

View the following link to download the report.
RunnerID:6976781052

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency requests to v2.32.3

Detected dependencies

github-actions

.github/workflows/main.yml

• actions/checkout v4
• actions/checkout v4
• actions/checkout v4
• actions/upload-artifact v4
• actions/checkout v4
• actions/download-artifact v4
• aws-actions/configure-aws-credentials v4
• actions/checkout v4
• actions/setup-python v5
• zaproxy/action-baseline v0.12.0
• a11ywatch/github-action v2.1.10
• geekyeggo/delete-artifact v5
• actions/checkout v4
• actions/download-artifact v4
• aws-actions/configure-aws-credentials v4

.github/workflows/periodic-broken-link-checks.yml

html

app/templates/music.html

• d3 7.9.0@sha512-vc58qvvBdrDR4etbxMdlTt4GBQk1qjvyORR2nrsPsFPyrs+/u5c3+1Ct6upOgdZoIl7eq6k3a1UPDSNAQi/32A==

app/templates/projects/comps.html

• d3 7.9.0@sha512-vc58qvvBdrDR4etbxMdlTt4GBQk1qjvyORR2nrsPsFPyrs+/u5c3+1Ct6upOgdZoIl7eq6k3a1UPDSNAQi/32A==

npm

package.json

• eslint ^9.0.0
• eslint-config-google ^0.14.0

pip_requirements

dev-requirements.txt

requirements.txt

• werkzeug >=3.0.1
• wheel >=0.38.0
• requests ==2.28.2

---

• Check this box to trigger a request for Renovate to run again on this repository

Add spotify stats app

GoodReads stats app

Add CD workflow

At least auto-deploy to dev, probably also to prod on push to master
If there are any tests you can run on the dev deployment that'd be cool (https://www.browserstack.com/guide/how-to-perform-website-qa-testing)

Catch failed auth for Spotify API

Currently just shows internal service error, would be better to catch and explain what went wrong

Add Spotify monthly playlists

Add firewalls article

Disctracker

Voice-to-text feature, ML for pulling out salient items and timestamping them

deploy dev to dev.charliebushman.com/branch_name

Avoid dev deployment collisions and have them at a human-friendly address