Initial commit: time tracker v0.1.0

Author: cpt-kernel-afk

.dockerignore

@@ -0,0 +1,37 @@
+# VCS
+.git/
+.gitignore
+.github/
+
+# Local environment
+.env
+.env.*
+!.env.example
+
+# Python cruft
+__pycache__/
+*.py[cod]
+*.egg-info/
+.venv/
+venv/
+
+# Django local artefacts
+*.sqlite3
+staticfiles/
+media/
+test_settings.py
+
+# Editor / OS
+.idea/
+.vscode/
+.DS_Store
+
+# Docs / dev-only files (not needed in the running container)
+docs/
+CONTRIBUTING.md
+SECURITY.md
+CHANGELOG.md
+AUTHORS
+
+# Tests don't need to ship in the image (kept anyway since they're tiny — uncomment to exclude)
+# tracker/tests.py

.editorconfig

@@ -0,0 +1,15 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = space
+indent_size = 4
+
+[*.{html,css,js,yml,yaml,json,md}]
+indent_size = 2
+
+[Makefile]
+indent_style = tab

.env.example

@@ -0,0 +1,61 @@
+# =====================================================================
+# Time Tracker — environment configuration
+# Copy this file to .env and edit the values. Never commit .env to git.
+# =====================================================================
+
+# ---- Django ----------------------------------------------------------
+# REQUIRED for production. Generate with:
+#   python -c 'import secrets; print(secrets.token_urlsafe(64))'
+DJANGO_SECRET_KEY=
+
+# Set to True only for local development. Never True in production.
+DJANGO_DEBUG=False
+
+# Hostnames the app will accept (browser-facing). Comma-separated.
+# Example: timetracker.example.com,localhost
+DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1
+
+# Trusted origins for CSRF (include scheme). Required when behind a proxy with HTTPS.
+# Example: https://timetracker.example.com
+DJANGO_CSRF_TRUSTED_ORIGINS=http://localhost,http://127.0.0.1
+
+# ---- Reverse proxy / HTTPS hardening --------------------------------
+# Set to True only if a reverse proxy you control terminates HTTPS and
+# sets X-Forwarded-Proto. NEVER enable this when the container is reachable
+# directly without a trusted proxy in front.
+DJANGO_BEHIND_HTTPS_PROXY=False
+
+# Enable secure-cookie flags. Only set True when the site is served over HTTPS.
+DJANGO_COOKIE_SECURE=False
+
+# Enable HSTS. Only set True when the site is served over HTTPS and you have
+# verified the certificate chain — HSTS is a one-way street.
+DJANGO_HSTS=False
+
+# ---- PostgreSQL ------------------------------------------------------
+POSTGRES_DB=timetracker
+POSTGRES_USER=timetracker
+POSTGRES_PASSWORD=please-change-me
+POSTGRES_HOST=db
+POSTGRES_PORT=5432
+
+# ---- Host port -------------------------------------------------------
+# Port on the docker host that maps to Apache:80 inside the container.
+WEB_PORT=8080
+
+# ---- Timezone --------------------------------------------------------
+TZ=UTC
+
+# ---- One-shot superuser bootstrap (optional, FIRST start only) -------
+# Recommended workflow:
+#   1) Set the three variables below and DJANGO_AUTO_CREATE_SUPERUSER=true
+#   2) docker compose up -d --build
+#   3) Log in, then set DJANGO_AUTO_CREATE_SUPERUSER=false (or remove the vars)
+#   4) Change your password via the UI (top-right menu → "Change password")
+#
+# Or skip the env vars entirely and run:
+#   docker compose exec web python manage.py createsuperuser
+DJANGO_AUTO_CREATE_SUPERUSER=false
+DJANGO_SUPERUSER_USERNAME=
+DJANGO_SUPERUSER_PASSWORD=
+DJANGO_SUPERUSER_EMAIL=

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,30 @@
+---
+name: Bug report
+about: Report a problem so we can fix it
+labels: bug
+---
+
+**What happened?**
+A clear description of the bug.
+
+**What did you expect to happen?**
+What you thought would happen instead.
+
+**Steps to reproduce**
+1.
+2.
+3.
+
+**Environment**
+- Time Tracker version / commit:
+- Docker version: `docker --version`
+- Host OS:
+- Browser:
+
+**Relevant logs**
+```
+docker compose logs --tail=200 web
+```
+
+**Additional context**
+Anything else worth mentioning (screenshots, config snippets — redact secrets!).

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,17 @@
+---
+name: Feature request
+about: Suggest an enhancement
+labels: enhancement
+---
+
+**Use case**
+What problem would this solve? Who would benefit?
+
+**Proposed solution**
+How might it work? (Optional — the use case is more important.)
+
+**Alternatives considered**
+Other ways to solve the same problem, if any.
+
+**Additional context**
+Mock-ups, links to similar features elsewhere, etc.

.github/pull_request_template.md

@@ -0,0 +1,29 @@
+## Summary
+
+<!-- One or two sentences describing what this PR does and why. -->
+
+## Changes
+
+<!-- Bullet list of the actual changes. -->
+
+-
+-
+-
+
+## Related issues
+
+<!-- e.g. Closes #42 -->
+
+## Testing
+
+<!-- How did you verify it works? -->
+
+- [ ] `python manage.py check` passes
+- [ ] `python manage.py test tracker` passes
+- [ ] Tested manually in the browser
+
+## Checklist
+
+- [ ] My change preserves backward compatibility, or the breaking change is documented in CHANGELOG.md
+- [ ] New code paths are covered by tests
+- [ ] No secrets, credentials or personal data committed

.github/workflows/ci.yml

@@ -0,0 +1,54 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    name: Tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: pip
+
+      - name: Install WeasyPrint system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            libpango-1.0-0 libpangoft2-1.0-0 libharfbuzz0b \
+            libcairo2 libgdk-pixbuf-2.0-0 libffi-dev \
+            shared-mime-info fonts-dejavu fontconfig
+
+      - name: Install Python dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -r requirements.txt
+
+      - name: Create test settings (SQLite override)
+        run: |
+          cat > test_settings.py <<'PY'
+          from config.settings import *
+          DATABASES = {"default": {"ENGINE": "django.db.backends.sqlite3", "NAME": ":memory:"}}
+          PY
+
+      - name: Django system checks
+        env:
+          DJANGO_SECRET_KEY: ci-secret-key-for-checks-only
+          DJANGO_DEBUG: "False"
+        run: |
+          python manage.py check --settings=test_settings
+
+      - name: Run test suite
+        env:
+          DJANGO_SECRET_KEY: ci-secret-key-for-tests-only
+          DJANGO_DEBUG: "True"
+        run: |
+          python manage.py test tracker --settings=test_settings -v 2

.gitignore

@@ -0,0 +1,47 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.egg-info/
+.eggs/
+build/
+dist/
+
+# Virtual envs
+.venv/
+venv/
+env/
+.python-version
+
+# Environment / secrets
+.env
+.env.*
+!.env.example
+
+# Django
+*.sqlite3
+*.sqlite3-journal
+staticfiles/
+media/
+db.sqlite3
+test_settings.py
+
+# Coverage / pytest
+.coverage
+.coverage.*
+htmlcov/
+.pytest_cache/
+.tox/
+
+# IDEs / editors
+.idea/
+.vscode/
+*.swp
+*.swo
+.DS_Store
+
+# Logs
+*.log
+
+# OS
+Thumbs.db

AUTHORS

@@ -0,0 +1,10 @@
+Time Tracker — Authors
+======================
+
+The following people have contributed to Time Tracker:
+
+* c4pt4in <https://github.com/cpt-kernel-afk>
+* Claude (Anthropic AI assistant) — initial scaffold and implementation,
+  assisting c4pt4in
+
+Listed in roughly chronological order of first contribution.

CHANGELOG.md

@@ -0,0 +1,28 @@
+# Changelog
+
+All notable changes to this project will be documented in this file. The
+format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/).
+
+## [Unreleased]
+
+## [0.1.0] - Initial release
+
+### Added
+- Project CRUD (name, description, color, optional hourly rate, archive flag).
+- Time entry CRUD with auto-calculated duration.
+- Live timer with single-concurrent-timer policy and live JS counter.
+- Dashboard with today / week / month totals per project.
+- PDF report (WeasyPrint) with date range filter, project filter, optional
+  cost calculation, per-project subtotals and a grand total.
+- CSV export of the same report data.
+- Built-in Django admin interface.
+- Authentication required on every endpoint; built-in login / logout /
+  password-change views.
+- Apache + Gunicorn + supervisord container, PostgreSQL 16, docker compose.
+- Bootstrap 5 and Bootstrap Icons bundled locally (no CDN).
+- Test suite covering models, auth gating, timer flow, redirect safety, and
+  report generation.
+
+[Unreleased]: https://github.com/c4pt4in/timetracker/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/c4pt4in/timetracker/releases/tag/v0.1.0