Fix: DB Migration

gatehouse_app/models/ssh_ca/ssh_certificate.py

@@ -50,7 +50,7 @@ class SSHCertificate(BaseModel):
     certificate = db.Column(db.Text, nullable=False)
 
     # Certificate metadata
-    serial = db.Column(db.String(255), nullable=False, unique=True, index=True)
+    serial = db.Column(db.String(255), nullable=False)
     key_id = db.Column(db.String(255), nullable=False)  # Usually user email
     cert_type = db.Column(
         db.Enum(CertType, values_callable=lambda x: [e.value for e in x]),
@@ -103,6 +103,8 @@ class SSHCertificate(BaseModel):
     )
 
     __table_args__ = (
+        db.UniqueConstraint("ca_id", "serial", name="uq_ssh_certificates_ca_serial"),
+        db.Index("ix_ssh_certificates_serial", "serial"),
         db.Index("idx_cert_user_status", "user_id", "status"),
         db.Index("idx_cert_validity", "valid_after", "valid_before"),
         db.Index("idx_cert_revoked", "revoked", "revoked_at"),

gatehouse_app/models/zerotier/activation_session.py

@@ -45,14 +45,14 @@ class ActivationSession(BaseModel):
         index=True,
     )
     authenticated_at = db.Column(
-        db.DateTime(timezone=True),
+        db.DateTime,
         nullable=False,
     )
     expires_at = db.Column(
-        db.DateTime(timezone=True),
+        db.DateTime,
         nullable=False,
     )
-    ended_at = db.Column(db.DateTime(timezone=True), nullable=True)
+    ended_at = db.Column(db.DateTime, nullable=True)
     end_reason = db.Column(
         db.Enum(ActivationEndReason, name="activation_end_reason"),
         nullable=True,

gatehouse_app/models/zerotier/zerotier_membership.py

@@ -51,8 +51,8 @@ class ZeroTierMembership(BaseModel):
     )
     member_seen = db.Column(db.Boolean, default=False, nullable=False)
     authorized = db.Column(db.Boolean, default=False, nullable=False)
-    join_seen_at = db.Column(db.DateTime(timezone=True), nullable=True)
-    last_synced_at = db.Column(db.DateTime(timezone=True), nullable=True)
+    join_seen_at = db.Column(db.DateTime, nullable=True)
+    last_synced_at = db.Column(db.DateTime, nullable=True)
     raw_controller_payload = db.Column(db.JSON, nullable=True)
 
     # Relationships