Facundo Olano

add header Strict-Transport-Security "max-age=31536000; includeSubDomains" https://scotthelme.co.uk/hsts-the-missing-link-in-tls/

Github and aws credentials are read from environment, while prod specific configs are left to be overriden with placeholder values. The same strategy should be used for both.

To avoid potential throttling issues with the external services. For example, if N users for the same country configure a slack channel, it's probable (if they use the same default...

(when editing something that was created before)

And accept/reject from admin panel

Maybe the calendar is a separate entity that the channels can refer to. this is partially possible with the "use holidays from X channel" feature, but the downside is that...

https://begriffs.com/posts/2017-10-21-sql-domain-integrity.html ideally try adding the constraints to the sql, with error messages and try to expose those in the api errors. related to #19