chore: cleanup obsolete files and update configurations

- Remove legacy RTD config and redundant requirements files
- Drop unused 'future' dependency per codeql advisory
- Update Dockerfile to reduce image size
- Adjust docs workflow permissions
- Revise pre-commit hooks configuration

Author: fed1337

.github/workflows/docs.yml

@@ -8,14 +8,14 @@ on:
 jobs:
   deploy-docs:
     name: Deploy Docs
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
 
     steps:
-      # 1. Checkout repository
       - name: Checkout repository
         uses: actions/checkout@v6
 
-      # 2. Deploy to GitHub Pages
       - name: Deploy pre-built docs
         uses: peaceiris/actions-gh-pages@v4
         with:

.pre-commit-config.yaml

@@ -1,24 +1,24 @@
--   repo: git://github.com/pre-commit/pre-commit-hooks
-    sha: v0.9.1
-    hooks:
-    -   id: trailing-whitespace
-    -   id: flake8
-    -   id: check-merge-conflict
--   repo: git://github.com/pre-commit/mirrors-jshint
-    sha: v2.9.5
-    hooks:
-    -   id: jshint
--   repo: https://github.com/ambv/black
-    rev: stable
+---
+default_language_version:
+  python: python3.10
+
+repos:
+#  - repo: https://github.com/pre-commit/pre-commit-hooks
+#    rev: v6.0.0
+#    hooks:
+#      - id: trailing-whitespace
+#      - id: check-merge-conflict
+#      - id: mixed-line-ending
+#      - id: end-of-file-fixer
+#      - id: check-yaml
+#      - id: check-toml
+
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.0
     hooks:
-    - id: black
-      language_version: python3.7
+      - id: gitleaks
 
--   repo: local
+  - repo: https://github.com/hadolint/hadolint
+    rev: v2.14.0
     hooks:
-    -   id: python-bandit-vulnerability-check
-        name: bandit
-        entry: bandit
-        args: ['--ini', 'tox.ini', '-r', 'consoleme']
-        language: system
-        pass_filenames: false
+      - id: hadolint

.readthedocs.yml

@@ -1,5 +1,7 @@
 FROM python:3.10-slim-bookworm AS builder
 
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+
 # Install build dependencies
 RUN apt update && apt upgrade -y && apt install -y --no-install-recommends \
     curl \
@@ -52,15 +54,12 @@ RUN apt update && apt upgrade -y && apt install -y --no-install-recommends \
 RUN useradd --create-home --shell /bin/bash lemur
 
 # Copy built project
-COPY --from=builder /opt/lemur /opt/lemur
+COPY --from=builder --chown=lemur:lemur /opt/lemur /opt/lemur
 
 # Ensure entrypoint is executable
 RUN chmod +x /opt/lemur/entrypoint
 
-# Permissions
-RUN chown -R lemur:lemur /opt/lemur
-
-# Switch to user
+# Switch to the user
 USER lemur
 
 # Expose port

Dockerfile

@@ -4,7 +4,7 @@
 
 - Docker 20.10+
 - Docker Compose v2.0+
-- Node.js 18+ and npm (for building frontend)
+- Node.js 18+ and npm
 
 ## Build locally
 
@@ -218,7 +218,7 @@ uv sync --reinstall
                       │
                       ↓
 ┌─────────────────────────────────────────────────────┐
-│     Caddy/your favorite web server (HTTPS only)     │
+│     Caddy/your favorite web server (port 80/433)    │
 │  • Serves static files (CSS, JS, images)            │
 │  • Proxies /api/* to Flask backend                  │
 │  • SPA routing (all routes → index.html)            │

SETUP.md

@@ -6,7 +6,6 @@
 .. moduleauthor:: Kevin Glisson <[email protected]>
 """
 
-from __future__ import annotations  # Import annotations to make type hints backwards compatible with Python 3.7/3.8
 
 import base64
 import time

lemur/auth/views.py

@@ -69,7 +69,6 @@ dependencies = [
     "flask-replicated==2.1",
     "flask-restful==0.3.10",
     "flask-sqlalchemy==2.5.1",
-    "future==1.0.0",
     "google-api-core==2.18.0",
     "google-auth==2.29.0",
     "google-cloud-private-ca==1.15.0",