From 20dbfd911aab2a348b36fdb651eac48d4297f982 Mon Sep 17 00:00:00 2001
From: Brlaney <Brlaney@outlook.com>
Date: Tue, 7 Apr 2026 14:22:52 -0500
Subject: [PATCH 1/2] x

---
 images/Nav_Banner.svg              | Bin 0 -> 2791 bytes
 images/UC_CleanUp-site-favicon.png | Bin 630 -> 619 bytes
 static/css/site.css                |   6 ++++++
 static/images/favicon.png          | Bin 0 -> 619 bytes
 static/images/nav-banner.png       | Bin 0 -> 3263 bytes
 templates/base.html                |   3 ++-
 templates/geoapp/cleanups.html     |   2 +-
 7 files changed, 9 insertions(+), 2 deletions(-)
 create mode 100644 images/Nav_Banner.svg
 create mode 100644 static/images/favicon.png
 create mode 100644 static/images/nav-banner.png

diff --git a/images/Nav_Banner.svg b/images/Nav_Banner.svg
new file mode 100644
index 0000000000000000000000000000000000000000..8217c16e86cc04338e99f50bbf2c53dec2cb7bc4
GIT binary patch
literal 2791
zcma);`#%#58^%YYXv<JC8j{mPmQ(eloQm0sF=7spIjclYVGbE`8aazX4ux_)58EO+
zv&vZ8VzN+Ddyup8dj5g;eSf&``?{{r{keYrCRw6Q!NO9)0001tLK<5E0DQoGt$Rpt
zf7^;EyX_w#f24gN0B~6R-{AukJeAxJ`2wv>F9T}FPJG)pKrbV6BLJY`(cxX3z`j2c
zWMUU&?dKVE9~a;OK=^q1;))t__q&8$QN~8sL-~FbnkU|{k?1de^B^q)Me}6YV1wKw
zk*q?PMn0baY@~ll9xZsVyV+%z)$9#CW+fVo%LbYmW6Xr{UTm^=w;}X6?7kAX;12y~
zs*?08x$gE48=Vup<<mUU1{u3yL;bKCE02oo+W6VO#les1ZOnH_^YEV+keH*2^A;JU
zDnnALhmuRnE9F#@GfN52RIVlq6G~P7`v1e|wCoI5?nCKPtPG`poB1n)gv1DTs~uvu
z=~VNI_qMI*<nWqC&Q;=D!Fyg2Q+=BpS8lt0Bo)6_vDv{fDORsD4t}=0(eQPw2E6K(
zyLvNPR=t1jCh1eskVeQj_&uf5uPy2Y!BXAPkGzGAgyYt%80@0h-H^wj0=VVpdybsF
z{wsC()bMo9dQ;@^i?1^W_H?2<W;#}{9WQ-TW0BzeK5?Q9|6-N_^HjJWqjBQN&L!Qj
z?Gz*w{5YSv&H2O7C)%R#tM2^Js3H%)lax(KGa&V=0fi*xPpQ<E1$vcLaJK)J5<J95
zm=h-e5k#)V4^1jF`pX;E$enD1b1g?yU3IScnJq}fMjh!zY)`N)c0E}#QlKZIa&?mK
z`H2FL^65<t8Y)BK){aJoAc>pd_1PI7-=Lpn7#W73^{HUIj><vV&Afb%{THiid3@(_
z>m+hFQ4-?<6oCc3NxYJ1#82B~uCyspG|V6z^|rK%J!djqGlqs9eC=m|k_&Y^0r}xf
z@|?Z&8=k3?vide=<xd*Voakq^r>6>cm|pQ<r?0C?S64rm(}*ncH(RxcT8S6x!+7he
z^I!IGd1fUbW<7JhM3;Xf$b2=d*6kjMOIKbP;b;oS`EaJP(4t`%B;unDR-Lb(ZO85W
zEFgyXvQG>1^6j36{%MS{z{)*F??gp75vc#nU9_;PGXgj)er)c}^J7Q1;TBTH<aptN
z#VIqd@}@^V$n?U;qgup)QubPspznXK$nN%4LNQ_Lr=4`HH=V4X)KH_()pl9-&5Olu
zH61Vg#+Z+4$?W0y7<vMfxrj_p!;7w59I16kbSWo+ceZfgAg$*+wINYYEUzN*^E-@F
zaNOT3g?n#(BmD&UKiUNzdmf`Gq;E|jk1|VWLxS<l$ysX=UG8nvj;7r_xRwEbIJ0Q1
ztt?UaknrC8qAol~ya%jVh=SDQgnsGVdsiK3e+={Zo{lB*e7P)9;gO_!$@Hev^h~t{
zs8J3i+dC^Ml_&X&Lq#$d3C%>G*cn~5;IPUm5H7(I`6<r2f@Y$xVT^dHD*bT+GQKS4
zDx)GYiz|~JxX(+-H)0-p((7O4$XL}}lyK7Q-UE*s$E=&qaEM;HZ~P}NW13+;d8?co
zT6e2c9EAA6r_L&j|I_u0pgOS?e=!bZ2I?BPUYy@k|N3irK3}cfnb;M)+hznqsdDhF
z7?so4Ed?*uax3>sz2KR!UpFbudKfdH__ak0$UtH$9%dE=mOStVOAlI#Y9fA55TAIg
zUt6N~FLr4B&IZO{2F_}ock~ti(qkwp1Nvtobkb@fQ=<&09W~htXkS?BCcEy4;-wUg
zko*kyE-S>4sTrc6WNlU{Yko(pCHW*07TaTcHuVUq;sp&!{&|$Y=C><=zBZEds3v%<
zrCd+7^Tpj1g~T83r?y9CAP0*NTS*`;&+0I5*VQH!2N{5FWj{NepiMB{DyV7IMyjpF
z#)S*@m@^zXyc<<{C8-Ym83^Ot=eB2t?|}x*vv#pQA?c^Z*~s;vxcQH!>$gKjD{t-H
zagF0op?_<v*CME?z7<x|TP|=Qfu__9>^Xk)5ddZulYG@nJfLyr{7t7&ebwaaA*j%Z
zW!YZ&pvBhP&}H_pfgMNo)j)6+|INGIyUdiy5v*rub8)j6_7$|}rCVVqT2Mu4h<;sR
za)%TF@4gz(=OV4poT^LFs?IfQeQ5?60w&*pxh=G^OFLeN9XWTyJ~~-TIMhjyJ~cTw
z7!}}AOR@#oo`_QW^JvsmuO2_-zBwmksA<CrA8udMju<v-`cTeMX8KWDoL$1V8~s;A
z*SHQWwdCs@`r3}-hs>0;dOgmKv}tTcf~5eR8#27JIY&7Gts;7u27EHi`%RiXS!k3C
zgSPm_cYl>|H83H}fu$EN^(FG$#N(1$$OkA#NBUR@C26HB&DVm;Ae7kE+zp9bc<6Wp
zsw@|+KXgjPBptL_x4bI;O+>(>m86_K?xA6#t;|TNg?xGu!JIQ^FRTa`=-r)<Rm3sG
zs@$U~$1c_l%PG<z>6!dSm#VX)I+sL&*jeE18RE-Ki>^rZx3+}Q(<SNh6FQe@ayii>
zPm{h*U-Q@Trx!v~YtT^U7scLDrKySaOx+EFCAF5)<6`acG6Xpv&-X5POmQx7?m>28
zjl9+evC`o`W1*R!yR?CSIS75Jc8g2$e#dMpK)0g0iq7a>?e}eE^?Bcs6Yk_DKXWN}
z4XOPjX+9m$v_XLdPWg}fqupG`ADKUWJX${}T&CPJHgKW!^O?TX<+o5sZ{s*pXfgXc
zi?!UFwWs-gk_iQ`4Xm<@ve2i6TI=d8v4e0Mm8|)$qIS=RgNQ0;{Qc3bB=S<f`RrO+
zq|QgPbZ|hk+FgyN<J+*yKc((O#Fk<qmB7Ke1b0&#nb6Hk`7T7tQL`I7Ptz}<4VXFq
zS1|g!%+%|(P$7AnUIS;%B*o9hYQyi_$3GHtI^0v#PuVo)bbTH?m;J05dG~;VDLYkb
zH20DnCNE5cR8q5$2S>zOm7_@&XC^al=iv4-NHI-=$sz0H1kczX)_$$590jTipyY^C
z!*fVN+^3}cHi@@1QFt8r^M!;SMhRq)qy4K4g17WedC77pW!}P5v#voR{wmfV3JUqz
z@}q$pf9@>PyOm{hYW=s1LToa2!ZqE{3oc#nE~uI1W}(+-)l8uQHR^FafD1_cse;-E
z5i-fiR!tLQEslTRm*I!GE-rK9)d+oXHnVfyFxx&*^&V-5;#eiAP+yg#C81|u*(7m>
zDZ%(&k2p;1@Gg{-HxZ2URHGgmM>j94bOQ!mY?{dpC%4@b%Qk%ayBI#LD{ZDFbPrWR
z*^@&r6!j_UQ(0+IsxlX#Q&*N`+<b_6JW8Tq#!t%)b^hSk6|MyAV`M@Y!f{uQd22+w
zXeb{mTHyK0cSR(VJ9_6XKMm!Ss}};ti#YZ^(Vb!0v<JMAOFH>}ni5`K-CKWo9Ysj|
zBx|H-T0yPLA@hRIPjB?l-UEIesavv%v*&gN_^No(*LZ$BdXTAmv~m@9D^i+an;-^h
zdq>L$L$LRL>sp%VUB#Pk(+WnW*(VqacHjWb`hD86f`tj3Ji1LaQ2XED)v`--K4$W*
q+Zift1KX-gLj6l@!~Y%DsDM)M%9mlKGrjv93P72ljcYHv5dH%=gj|IH

literal 0
HcmV?d00001

diff --git a/images/UC_CleanUp-site-favicon.png b/images/UC_CleanUp-site-favicon.png
index 565e3736894950ceebc9cfd1429b1a409d8a884b..9d382a5faab936b5a6cbd8f095ce8302a6efeac0 100644
GIT binary patch
delta 517
zcmV+g0{Z>-1nUHlaDV1WL_t(|0qxtpOB-Pv!13?JR)Q&*%}!D}NSD6+0|lXl3eC{1
zLj@;stX&FDIR{a6FtaWSDmaRY3K0|s!9jdk6h%ZF)ae|8f{@31oE${SJ-HnE`+eZH
z=MwJAb3B1Ok4LB>m-oT@iy?~y9)U58UCsOdyi6`%FeZF>iGK`!%HVY%l}C3<%(Q=4
zHid8+0O7<3cty-Uy?@JMe+P}3bVc`Fmab{*8E5C{j5x(Q1EM~>W$&@~+RuoS*YMLf
zROsu+cQiLOJ~?ivvn|rY-)Cn+-_$BW>FUvOC+C-}?H*I9NUuQq_s_I{`$8?)fP<Ys
zo*Xw(+=>)HSAPM7(*Ot;X%%=$^p_xx{)9_nk|vAWxNr_I(*27hxdzZx0O2$M!o?OK
zlk2^^YB9!z&H#kd00^f65KaRioCZKR4S;YO0O2$M!f616(*Ovk0T5322e|GJD9z<b
zlIwp4`U)VNa{#-MF)7vfZs!1T@8x~W?D`(AoCEwHU49}db_=bms?30{!VI<6H9W(~
zMS!ci*Db9+j%<X9<!!QW(lj?^N!Q1-3qJ_o`HlTke)mmN+&rWjbe|x?X#j-N0QMj;
zas?^M6cEak8LPWFSXr%aX|?BvKZKXt38&{HC>sW@7yO=E5uSoc9s*((00000NkvXX
Hu0mjf$1m?n

delta 529
zcmaFO@{MIeLH$Qh7srqa#<#ckddoOU9RK)!joKSQ#oL)vTV^OtHT>@|>6u={GS5_w
zOsAlk4Vpnm?kF}Dh?R+naYfyTjObYYz&lZ~DJgmJBk$s}a1O1G$7e&u9u-=@ll^5Q
zA0aj^cG}Ok#%B)MWovL7|KD_NmK?JnQ-nt1nIDyk-)}FuRC~DoDYLCd%1O5AA4C_f
zc^Iy+^iBSwV{!^}*cu8RF=wbH%D&A#!&|FdC3LMM_T`hF{=LaLZ$&+W7KsX!fAG5^
z6t?bd#Z9+KJ~Q5JzVhPkY;l|Hwfm}`)t4QW`ct}2h)qpg`}b`bG4C}wZ-ZAy1TV0@
zdvf}j=vN0ro&LFpU;V7cC0)Of=|U*OLlcIU?yX!lD!<e^mcR2+?=^|MaiqPRVe#Ji
z87lV~N<<wjco`lFaVt#y8GrLtVITimhL+0=0)EV3aiC^woVWZR-tt@MJ^`AL&t}Cc
zaL&3Ri?_#fS9f(a`-Bqx_ql0d+dtMnl|3+jVx&}RLK0{EKhX`*Ppa!?RTY1?vCw<C
zdgac)wPOBxQaj@2F4xtZx81F!fAY&i<;8WmzdO$F)O>cmd<XX}^^O85hC`VQQ{_8b
zi<0?!QY98LWgnld_ifsA`Mtjcre3bdJ@B4?dG#UNpP!oLZK7ZNuV!s!X}&Pq)nFY1
Q0~Z5>r>mdKI;Vst08SI{&Hw-a

diff --git a/static/css/site.css b/static/css/site.css
index b5e0c06..f275bf7 100644
--- a/static/css/site.css
+++ b/static/css/site.css
@@ -476,6 +476,12 @@ button:disabled,
   text-decoration: none;
 }
 
+.brand-logo {
+  height: 36px;
+  width: auto;
+  display: block;
+}
+
 .brand-kicker {
   font-size: 0.68rem;
   text-transform: uppercase;
diff --git a/static/images/favicon.png b/static/images/favicon.png
new file mode 100644
index 0000000000000000000000000000000000000000..9d382a5faab936b5a6cbd8f095ce8302a6efeac0
GIT binary patch
literal 619
zcmeAS@N?(olHy`uVBq!ia0vp^4j|0I1|(Ny7TyC=oCO|{#S9GG!XV7ZFl&wkP>``W
z$lZxy-8q?;Kn_c~qpu?a!^VE@KZ&eBK3|DzL`iUdT1k0gQ7VI5W_oVoyp7Y6fx4b~
zx;TbZFuuLL*IPPK=D^4IN5h&lXPos5vhtX|?+-KU!d9-c7uGtnsu!+_<?^#+4=gd*
ztjDEg(bdHzD8hcwu_jW))kWsYOPQvo3CFAF$he%e-6`|yckP31&xPKdF1Bg3>33hD
zIQ{#<-`$GcEOL#8J+Wth|KH=I7jK|eQ_;y&cj`f@!c_NiuQOZfBg|S0q!=C^VXtsK
zW4E{dbW%Ng@5~a{@3GU?Wxke7fBvG!;;0q#BD+1Q?>BzGb-rWr^$(ZLLteZ-UT$J;
zYG;|ZVzch0!}rtEo$g=Ja(wyfVxju;>1*D~1+Vm2@9_Kk`7QOoopf(BG|#o4Cu1IX
zr%S{koU!FH1BZB~XocsO=?Z=STD+4csdeApQNU+#>2J5nPPPl73=d5h4jmO!nEZP0
z?kvM&t>+j(T9z{k_%SQYVRNwHZ2&nLs3sFG@tu9gJARF`Pdz8Su4ntjr7)+MVfREs
z&8t81o--7_e_DIy%`dribD00g$0})-aj#vy>P*ABLp)ornc5sa>DsV**LB^sc6~W5
zolkQ&<zF%}PxZWhd^5K_$NitZe}n73`v%{!St3<3Ujbs{HwD8YR?Sl)0;i@(uHJ1K
x5xF)$bL;bV`<CgqIhQ|I){tgfC;n$%wBWoZPdTO}F<@F?@O1TaS?83{1OStm1RMYW

literal 0
HcmV?d00001

diff --git a/static/images/nav-banner.png b/static/images/nav-banner.png
new file mode 100644
index 0000000000000000000000000000000000000000..435dc61baf6bda549374f96ae6a649c7808dabac
GIT binary patch
literal 3263
zcma)<X*^VK8^;G@8SA7dBU{Eg!Z0MpFqVw$MuQ>ih?4xt8i^6fzY)nAB}9qA*te`H
zB9X1eE=BgOv3pK0p4ZRw=6ue%&wcLuT)*?XzSnggTACa2aKbo2AP|o+&cGT3Vgdu_
znjCDvk-#V84gzt<8XI73Lb8^#EWCtmML*oDP_S``8CsIcOV0mIlNPtHk+nRI;#hiR
zTv-FYB4yIDP99f(7vkqQs%U`R7R^#PQ7lY^$^W}2_#UGn9_=HdFiC>ce>O}Bu%{?#
zu?Pj-xf7P?X_*!3d+kROdf^B&743=Ioakv}+-;s*J)D@GIG#7rg@TztJ42ziAS{#-
zNsbhc<K<)~i)+eqaFFM7#Kk#sqyO*0&BaYB$c^vC2+Jq@$&UH4tvu!n^LygW3Z|^C
zaDLRy@S*yTUGd**ysxi0@r9p(Jjq$pS__^0`uJ0KpJmCh@a3ukgr?!zISb4qHi?j=
zd$S=`6S2gr_kWfT;<b0VM4y;<aQB(%$Zz?Zbe!uidl67`k&-I=ETXT%Q40s`;k{rH
z`$1_u)RbiCf%#}p)$YZ?4FvJ-%KQ-IJsE`jw^1GPgWd6{X0M6Gs0>n84_qm_Z_)Lr
zn&_K+a~kAN7Z^dY-S6EPyzjc-(6DhflWsjp6@gQOg~-engjFfC7~S??+q#-3q65yc
zS#Wx6q!lW$4@_Ts;zvt|sR}Styhi!n-Zr)~r6e^xe%{bY!yYyJ1zI9uf07UHnK}qY
zf9;W;T`Tp)$h7|3_;PXP6fl{FR&%xIu7_}-Z=OGdtQ2<c5skp*WN%gp;Hi>VbnQUe
zElrV?CC1Bg%{2JJ+j7-OPox^JYL`Ylvp=<Vz=MMmZGSvd;GV4^zE*}-!)7J4DHU{z
zoM55My@ALM!Sac|e1mu6Vh`c`f?LN9x!|h$kH*?;5f*u@<h!TQ;>`psVX(##o+;od
z$WFU+6_B5qY;k;i)vv!8<IK2l^PzQL>t$Qcw!^_QU~|J?4P63=L^@U1<SEwLMp1SR
zSk?upc0{momduXB-fGaxy1{{sl40Q82REPO>Q!6DR?SG@;=9+K_<$huPqw%4CzTdR
zPw{c}WxYO^oP>+ZFXe6DM(CrarNXM%iUs(>c*AMTt>>-IP5RnSxkjY1fOgjDeLSmv
z3!mNfyhnk>bt2ruvl-tf)3Fnq+!%W6Qj<bK=Ns%&6ES-9FoJsWeohPC=&G^R^l-G;
zgf-(vQ}2~UpV6^<tbpMD+89#E;o)Gddp1RiO?XZ+-AS$yStXB<A3>+)*m&zwLvU4*
zmn0?5JOqoJRFq6Dl<qR!pe?Na9irTyn(a{D-MrjN_+W2JQDs#HL{Eo3u%LE+B#D8Q
zW!FgF3+jO`{p7y9B<NUAG2fWH7UCV3=xAnxncceD^1fjkd2XtH(T$_{66$zc@atf*
zfIxvQr{kub3R(vSxi}NM(<u5|cJh=|?Y2vHhNo4LTJ3J3(wkq|0s7_@RRQ!TX984V
zkk;V=pQ7D6FjeHdwD{Uu`{@flLmxO5kQ!ItWqaP{s=RJ0c`ez`t|_f@E1X&Zy(Gt%
zfgrf}?0>PDBN@hY#dtdE=&S+R(Ztxw`<1$qgdo%w$O=sqj^v+L1tQLn<m4)uHCIHt
z4=ZKI*$c7&)}F*?+u5C9;Q`Y7ILm~$<H~K$hDjvw&9`NeNL(J*#Qaml|GxW!F<CMD
zcNQ|Q2XvbMLGh!|6Q`scT8pepkjkoRus`_oEXGzADzbDaGz4&EY<W76HL6{o3^w;E
zc9n8$(K(?CQGJU{&s{}$+pcK&0{NSWAf%I5<gvi?!K4v0v3T`dpYPBTtp4I_Gb{4n
zVBUV}-3Zk#3lDBnPE~#OsJ;DwI^8tz@Qf>^C*yz@@YKst1wW>!2T8cZgS$6qzWBCp
zdO|9@SI6&iaiEKpCg7E;!P*$`D`JIG-~u~wO4C7O3eYLCrCr8$L69hOOU0BH!*avf
z{|a~1urkST`I*o%+}!NzMM~ddl=oBJ#p_7WeB<hFsWYq-8}7sxNa^0*S$z`-c&nxT
zK(UZj8c00v_xhiESQk<p%b7PVCc|TgAMW&bb8$4zZqLgkbM;NRrcG5DKvZ@`5(M&J
zRk82{L)v0$PTvE8aHZoz{S#HO`W20TZt!TFXM@plt;bQB$CoR3%?lp#7`*}<?!m<#
zJCYr<#5Eh%9nV?0vD6{*`5Ca4T6Yib&F~a0hBh78F1-%3t>fNUe8KaW{pv82L#{z@
z@IR8{kc;DwF6rgmJQ@mGOZl^e!jCB&CDW<Oo@sZY)F`7GM~|od2#;EQepDlRHihSG
zm6IPe2aW+K1Yps-{7*`Zu5bxxUdZ7WlMnH0$vMA?ZI#=Q%)8tm;eP%(tl-G$p65|R
zX?9y?&^wS*<*?2wM8I*t7n{Z0X}?RuV&uk?>Gj;ST$uU>&Mqh6DQHQEC9`gz%g^`B
z-s_4BGl>XMBByRId=|bJ<r1Q}KNES~ocNOHD=ezh6``8F$U2{1=xh~)xgl!OlKH)Y
zYgsGh2G7n!#}=w>g@eA{yU-s-aPT|X>khfZoxu0tu&ny-$Hvs3=G&T2*ui2I$K^8;
z{O(Hpc&u0alj-&z_-vVdgkh6n_8E0_1a83;1_T^S2HaZv0;X!#$_?=Ld8RU222mtQ
ze+2AgPOx!<KmGR&a&$~5ch3vPz|Rh5KlWmJ>GU#iYVwYD83ASShjw{$RHGUwVCf>A
zw|@QzmB5qf3kKYP1%JDw0A-ENsq0x->V$KqAPaHV5BqL*ejfAy=pFmPNK)cA>}YG~
zOrW-2uL0EmJ!c@%OI_#zz|hzG!jBB}{t{<<LU{l49OTQnAxtTIb?Pnsy&FAc35_G}
z^{G=3_vf{zi?*w$wM2OLh469uq;02xwa3G?7vxsch6uT?&3TAR`(11vAky+}A)b8*
zf<52XTP-`TwQ47E`KZQdp$}Fd$b6m%`C{L$!w)%Oh6*WV&vn&NEg4YI1h`4s&;kn2
z^^geQt%TPlM&GL8wq;Jh=bDudq9!XHjjbeRbA*oaEq`LnxliVuKmy3rOuL`)!-Hmp
zA^$7~H!?0j4|SC(sz2gWp7-JabL&y<kOv9QllzjUis-QRT%m{eKmK+cD0^;Zm7Ab^
z%||LEN#?u!l}PivpgTb?Uz91dC&yUJOggZ=U^FE!eSmI9d^_z~0Ul|th19vlkets(
z9@HnN2WVqDDr<Y#4Dnb%S;sfSIX_#x5k<uSUKBjeUgKgP+ungz^+dMl6XWdV@w2WG
zANmu5Xo;M5g2t$&nv_BS%0`B7pUEikYUJ_QF*Eb&MC@O*S@bz4Cl6+Qei4z>wQAW1
zID#6gAQTS=%{$PWK9#Y(jcmcQuA=}_Q4VcAkA{OLuH&DYj<DEgderW}{<5jqHJ(!b
zb<`JQS4bsRnn*XZ6bJM=$qm7>@LD3mub^7SCQn_C76iA$QA-c{adC2N1i^H((gRv>
z#AiWXjZ9&m2fKw12@d3IWgU*~PsFqG!~bNteK&DW6A++=*LQ!jA0!z_H_v)?9H9U;
z8g^Z>h1S*bCf#z9&Y!hZ9qoBNOjq`GHM<K?!pmF4D}A@>*6fPp9)B3ZwDgoqMY#H6
z3su%*Lo1cQ<?vY_nC*B_afPnrRysUiSN<uUvqrS|cCeUs&G@wDT*Qbi^2?}#m>&Q%
zjf$O**YlG@x>EWG`-*I^O$+DmD`nsGGV0i-P#Fgab1DGMfGRhx#x+v>g<q<6W1(ny
z^=e6ttN*l?QT4=&dwT;Y(Lz^G%gU7cG2ni{FC@dyE#2`kUn>qyN?(zalP?xPlv!c?
zNhveL^+X4RDA~Ra$a8hZ<Fkkn-t$)Eg%swruGO|B$|n+>U*(aQmkH%Uw^11Zjjlip
za{;x1aTvr3lo-<e8EITR=d*pIM0&L#!!^bA)H-#T4m3Jj?^A@q->;!F4yX%Z#l!S9
zWkAYjPo0CiC*P`lT%zna_>_$J*D-YVHcSN;Z#s1a%fERIbXDv$qw%i2AZ?tq-0!*o
zMOAZ)q<X(&jI(DDuGG`y>Df|GMuEy<ZL{$Fhp_w-wYq>`>%xo`MF)b7SG={w;dBqs
zcH@rA<T=czi{6`Ykh7HjM@v3iWJWjv4o!9}cMHj?TI{!P>41Z=0be|Hp$6=%OjxMM
nDKKzt35A0DvDp6(W*;*R#A&x{tIKBqKPDh!LvsVFo(uUu*)|h3

literal 0
HcmV?d00001

diff --git a/templates/base.html b/templates/base.html
index f72d698..f2336dc 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -9,6 +9,7 @@
     <link rel="preconnect" href="https://fonts.googleapis.com">
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link href="https://fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&family=Open+Sans:ital,wght@0,300..800;1,300..800&display=swap" rel="stylesheet">
+    <link rel="icon" type="image/png" href="{% static 'images/favicon.png' %}">
     <link rel="stylesheet" href="{% static 'css/palette.css' %}">
     <link rel="stylesheet" href="{% static 'css/site.css' %}">
     {% block extra_head %}{% endblock %}
@@ -18,7 +19,7 @@
 <header class="topbar">
     <div class="topbar-inner">
         <a class="brand" href="{% url 'map' %}">
-            <span class="brand-title">Upper-Cumberland CleanUp</span>
+            <img class="brand-logo" src="{% static 'images/nav-banner.png' %}" alt="Upper-Cumberland CleanUp" height="36">
         </a>
         <button class="hamburger" id="hamburger-btn" type="button" aria-expanded="false" aria-controls="nav-collapse" aria-label="Toggle menu">
             <span class="hamburger-bar"></span>
diff --git a/templates/geoapp/cleanups.html b/templates/geoapp/cleanups.html
index 0eef2c9..a8cf72a 100644
--- a/templates/geoapp/cleanups.html
+++ b/templates/geoapp/cleanups.html
@@ -8,7 +8,7 @@
     <div class="page-intro">
         <span class="section-kicker">Community Impact</span>
         <h1>Completed Cleanups</h1>
-        <p>See the difference volunteers are making in District 3. Every cleanup counts.</p>
+        <p>See the difference volunteers are making in the Upper-Cumberland region. Every cleanup counts.</p>
     </div>
 
     {% if items %}

From 67e41ead7c98b2a0698fee2ea7de0b096f7137ce Mon Sep 17 00:00:00 2001
From: Brlaney <Brlaney@outlook.com>
Date: Wed, 8 Apr 2026 10:24:30 -0500
Subject: [PATCH 2/2] fix: align env var names with Render dashboard config
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- settings.py reads CF_* vars for R2 and DB_CONN_STRING for database
- render.yaml keys updated to match (CF_ACCESS_KEY_ID, CF_SECRET_ACCESS_KEY,
  CF_BUCKET_NAME, CF_S3_ENDPOINT_URL, CF_S3_CUSTOM_DOMAIN, DB_CONN_STRING)
- web-entrypoint.sh skips pg_isready when POSTGRES_HOST is unset (Supabase via
  DB_CONN_STRING only — avoids infinite hang on Render)
- render.yaml: removed Render-managed DB, added preDeployCommand for migrations,
  set GUNICORN_WORKERS=2 for starter plan RAM budget
- docker-compose.yml: add LAN IP to ALLOWED_HOSTS default for phone access
- Add PLAN.md production readiness checklist

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 PLAN.md                     | 116 ++++++++++++++++++++++++++++++++++++
 docker-compose.yml          |   2 +-
 docker/web-entrypoint.sh    |  10 ++--
 putnam_trashmap/settings.py |  22 +++----
 render.yaml                 |  50 ++++++++++------
 5 files changed, 165 insertions(+), 35 deletions(-)
 create mode 100644 PLAN.md

diff --git a/PLAN.md b/PLAN.md
new file mode 100644
index 0000000..47af605
--- /dev/null
+++ b/PLAN.md
@@ -0,0 +1,116 @@
+# Production Release Plan — Upper-Cumberland CleanUp
+
+## Status: Pre-production on `main` branch
+
+---
+
+## Phase 1 — Infrastructure (Blockers)
+
+These must be resolved before any real users hit the app.
+
+### 1.1 PostGIS Database
+**Problem:** Render's `starter` database plan is plain PostgreSQL. GeoDjango requires PostGIS, or every spatial query and migration will fail at boot.
+
+**Fix options (pick one):**
+- **Supabase** — free tier includes PostGIS. Get the connection string, set `DATABASE_URL` in Render env vars.
+- **Neon** — free tier, enable PostGIS extension manually after creating the DB.
+- **Render paid DB** — upgrade to a plan that allows extensions, then run `CREATE EXTENSION postgis;` via their console.
+
+**Action:** Provision a PostGIS-enabled DB, grab its connection string, and update `DATABASE_URL` in Render's environment variables dashboard.
+
+---
+
+### 1.2 Media Storage (Cloudflare R2)
+**Problem:** `render.yaml` sets `USE_S3_MEDIA=1` but the R2 credentials are all `sync: false` (unpopulated). Photo uploads will fail silently or 500 in production.
+
+**Action:**
+1. Create a Cloudflare R2 bucket named `upper-cumberland-cleanup`.
+2. Generate an R2 API token with Object Read & Write.
+3. In Render's environment dashboard, fill in:
+   - `AWS_ACCESS_KEY_ID` — R2 Access Key ID
+   - `AWS_SECRET_ACCESS_KEY` — R2 Secret Access Key
+   - `AWS_STORAGE_BUCKET_NAME` — `upper-cumberland-cleanup`
+   - `AWS_S3_ENDPOINT_URL` — `https://<account-id>.r2.cloudflarestorage.com`
+   - `AWS_S3_CUSTOM_DOMAIN` — your R2 public bucket domain (or leave blank to use the endpoint)
+
+---
+
+### 1.3 Run the Test Suite
+**Problem:** The test suite was completely rewritten for the new architecture but has never been executed against a real DB.
+
+**Action:** Start Docker Desktop and run:
+```powershell
+docker compose up -d db
+docker compose run --rm web python manage.py test --verbosity=2
+```
+Fix any failures before deploying.
+
+---
+
+## Phase 2 — Security & Config
+
+### 2.1 `ALLOWED_HOSTS` and `CSRF_TRUSTED_ORIGINS`
+Current `render.yaml` only allows `upper-cumberland-cleanup.onrender.com`. If you add a custom domain, update both env vars in Render's dashboard — not just in the yaml.
+
+### 2.2 Create Superuser on First Deploy
+Render doesn't have a one-time post-deploy hook. After first successful deploy:
+```bash
+# Via Render shell tab on the web service
+python manage.py createsuperuser
+```
+
+### 2.3 Redis for Rate Limiting (Optional but Recommended)
+Without Redis, `django-ratelimit` uses in-memory cache — limits won't be shared across Gunicorn workers. On Render you can add a Redis instance:
+1. Add a Redis service in Render dashboard.
+2. Set `REDIS_URL` env var to the internal Redis URL.
+
+---
+
+## Phase 3 — Seeding Districts on Production
+
+The entrypoint auto-seeds Putnam County and District 3 from the GeoJSON files baked into the Docker image. This will run automatically on every deploy — it uses `update_or_create` so it's idempotent.
+
+**Verify after first deploy** via `/api/districts/` — should return both `putnam-county` and `district-3`.
+
+---
+
+## Phase 4 — Custom Domain (Optional)
+
+1. Add domain in Render dashboard → Custom Domains.
+2. Update DNS at your registrar (CNAME → `upper-cumberland-cleanup.onrender.com`).
+3. Update Render env vars:
+   - `ALLOWED_HOSTS` → add your domain
+   - `CSRF_TRUSTED_ORIGINS` → add `https://yourdomain.com`
+
+---
+
+## Phase 5 — Pre-Launch Checklist
+
+- [ ] PostGIS DB provisioned and `DATABASE_URL` set in Render
+- [ ] R2 bucket created and all 5 media env vars filled in Render
+- [ ] Test suite passes locally (`python manage.py test`)
+- [ ] First deploy succeeds — `/healthz` returns `{"ok": true, "database": "up"}`
+- [ ] `/api/districts/` returns both district boundaries
+- [ ] Superuser created via shell
+- [ ] Photo upload works end-to-end (report a site with a photo)
+- [ ] Mark cleaned with before/after photos works
+- [ ] `/cleanups/` page shows completed cleanups
+- [ ] Redis added (optional — do if rate limiting matters at launch)
+- [ ] Custom domain configured (optional)
+
+---
+
+## Deployment Trigger
+
+Render auto-deploys on push to `main` (set in `render.yaml` `autoDeploy: true`). Merging any PR to `main` triggers a deploy.
+
+Current branch with all changes: `feat/district-3-pivot` (already merged to `main` per your note).
+
+---
+
+## Known Gaps (Post-Launch)
+
+- **Password reset** — no email backend configured. Users cannot reset passwords yet. Needs `EMAIL_BACKEND` + SMTP or SendGrid env vars.
+- **E2e Playwright tests** — `seedScreenshotDemo` management command was removed in the pivot. Smoke tests will fail in CI until updated.
+- **Admin hardening** — consider restricting `/admin/` to staff-only IP ranges if exposed publicly.
+- **Backup strategy** — Render starter DB has limited backup options. Consider daily export or upgrading the DB plan.
diff --git a/docker-compose.yml b/docker-compose.yml
index f8dd313..16b2983 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -29,7 +29,7 @@ services:
     environment:
       SECRET_KEY: ${SECRET_KEY:-dev-secret-change-me}
       DEBUG: ${DEBUG:-1}
-      ALLOWED_HOSTS: ${ALLOWED_HOSTS:-127.0.0.1,localhost}
+      ALLOWED_HOSTS: ${ALLOWED_HOSTS:-127.0.0.1,localhost,192.168.1.37}
       TIME_ZONE: ${TIME_ZONE:-America/Chicago}
       POSTGRES_DB: ${POSTGRES_DB:-putnam_trashmap}
       POSTGRES_USER: ${POSTGRES_USER:-putnam}
diff --git a/docker/web-entrypoint.sh b/docker/web-entrypoint.sh
index 55e6525..466aa04 100644
--- a/docker/web-entrypoint.sh
+++ b/docker/web-entrypoint.sh
@@ -1,10 +1,12 @@
 #!/bin/sh
 set -e
 
-echo "Waiting for PostGIS at ${POSTGRES_HOST}:${POSTGRES_PORT}..."
-until pg_isready -h "${POSTGRES_HOST}" -p "${POSTGRES_PORT}" -U "${POSTGRES_USER}" -d "${POSTGRES_DB}" >/dev/null 2>&1; do
-  sleep 1
-done
+if [ -n "${POSTGRES_HOST}" ]; then
+  echo "Waiting for PostGIS at ${POSTGRES_HOST}:${POSTGRES_PORT}..."
+  until pg_isready -h "${POSTGRES_HOST}" -p "${POSTGRES_PORT}" -U "${POSTGRES_USER}" -d "${POSTGRES_DB}" >/dev/null 2>&1; do
+    sleep 1
+  done
+fi
 
 echo "Applying migrations..."
 python manage.py migrate --noinput
diff --git a/putnam_trashmap/settings.py b/putnam_trashmap/settings.py
index 83852c9..19d110f 100644
--- a/putnam_trashmap/settings.py
+++ b/putnam_trashmap/settings.py
@@ -76,7 +76,7 @@ def _env_list(name, default=""):
 
 DATABASES = {
     "default": dj_database_url.config(
-        default=os.getenv("DATABASE_URL", default_database_url),
+        default=os.getenv("DB_CONN_STRING", os.getenv("DATABASE_URL", default_database_url)),
         engine="django.contrib.gis.db.backends.postgis",
         conn_max_age=int(os.getenv("CONN_MAX_AGE", "60")),
         ssl_require=os.getenv("DATABASE_SSL_REQUIRE", "0") == "1",
@@ -151,12 +151,12 @@ def _env_list(name, default=""):
 
 USE_S3_MEDIA = os.getenv("USE_S3_MEDIA", "0") == "1"
 if USE_S3_MEDIA:
-    AWS_ACCESS_KEY_ID = os.getenv("AWS_ACCESS_KEY_ID", "")
-    AWS_SECRET_ACCESS_KEY = os.getenv("AWS_SECRET_ACCESS_KEY", "")
-    AWS_STORAGE_BUCKET_NAME = os.getenv("AWS_STORAGE_BUCKET_NAME", "")
-    AWS_S3_REGION_NAME = os.getenv("AWS_S3_REGION_NAME", "auto")
-    AWS_S3_ENDPOINT_URL = os.getenv("AWS_S3_ENDPOINT_URL", "")
-    AWS_S3_CUSTOM_DOMAIN = os.getenv("AWS_S3_CUSTOM_DOMAIN", "")
+    AWS_ACCESS_KEY_ID = os.getenv("CF_ACCESS_KEY_ID", "")
+    AWS_SECRET_ACCESS_KEY = os.getenv("CF_SECRET_ACCESS_KEY", "")
+    AWS_STORAGE_BUCKET_NAME = os.getenv("CF_BUCKET_NAME", "")
+    AWS_S3_REGION_NAME = "auto"
+    AWS_S3_ENDPOINT_URL = os.getenv("CF_S3_ENDPOINT_URL", "")
+    AWS_S3_CUSTOM_DOMAIN = os.getenv("CF_S3_CUSTOM_DOMAIN", "")
     AWS_QUERYSTRING_AUTH = False
     AWS_S3_FILE_OVERWRITE = False
     STORAGES = {
@@ -210,10 +210,10 @@ def _env_list(name, default=""):
 
 if not DEBUG and USE_S3_MEDIA:
     required_storage_values = {
-        "AWS_ACCESS_KEY_ID": os.getenv("AWS_ACCESS_KEY_ID", ""),
-        "AWS_SECRET_ACCESS_KEY": os.getenv("AWS_SECRET_ACCESS_KEY", ""),
-        "AWS_STORAGE_BUCKET_NAME": os.getenv("AWS_STORAGE_BUCKET_NAME", ""),
-        "AWS_S3_ENDPOINT_URL": os.getenv("AWS_S3_ENDPOINT_URL", ""),
+        "CF_ACCESS_KEY_ID": os.getenv("CF_ACCESS_KEY_ID", ""),
+        "CF_SECRET_ACCESS_KEY": os.getenv("CF_SECRET_ACCESS_KEY", ""),
+        "CF_BUCKET_NAME": os.getenv("CF_BUCKET_NAME", ""),
+        "CF_S3_ENDPOINT_URL": os.getenv("CF_S3_ENDPOINT_URL", ""),
     }
     missing_storage_values = [key for key, value in required_storage_values.items() if not value]
     if missing_storage_values:
diff --git a/render.yaml b/render.yaml
index 38f3aed..6ccff2d 100644
--- a/render.yaml
+++ b/render.yaml
@@ -5,42 +5,54 @@ services:
     plan: starter
     healthCheckPath: /healthz
     autoDeploy: true
+
+    # Run migrations before new instance receives traffic (zero-downtime deploys).
+    # The entrypoint also runs migrate as a fallback for local Docker usage.
+    preDeployCommand: python manage.py migrate --noinput
+
     envVars:
+      # Generated once by Render and persisted — never regenerated on redeploy.
       - key: SECRET_KEY
         generateValue: true
+
       - key: DEBUG
         value: "0"
+
+      # Update both values if you add a custom domain.
       - key: ALLOWED_HOSTS
         value: upper-cumberland-cleanup.onrender.com
       - key: CSRF_TRUSTED_ORIGINS
         value: https://upper-cumberland-cleanup.onrender.com
-      - key: DATABASE_URL
-        fromDatabase:
-          name: upper-cumberland-cleanup-db
-          property: connectionString
+
+      # Set manually in Render dashboard — Supabase connection string.
+      # Format: postgresql://user:password@host:5432/db?sslmode=require
+      - key: DB_CONN_STRING
+        sync: false
       - key: DATABASE_SSL_REQUIRE
         value: "1"
-      - key: RUN_COLLECTSTATIC
-        value: "1"
+
       - key: LOG_LEVEL
         value: INFO
+
+      # Gunicorn — starter plan has 512 MB RAM; 2 workers is safe.
+      # Increase to 3-4 if you upgrade the plan.
+      - key: GUNICORN_WORKERS
+        value: "2"
+
+      # collectstatic runs inside the Docker entrypoint when this is "1".
+      - key: RUN_COLLECTSTATIC
+        value: "1"
+
+      # Cloudflare R2 (S3-compatible) — set all five in Render dashboard.
       - key: USE_S3_MEDIA
         value: "1"
-      - key: AWS_S3_REGION_NAME
-        value: auto
-      - key: AWS_ACCESS_KEY_ID
+      - key: CF_ACCESS_KEY_ID
         sync: false
-      - key: AWS_SECRET_ACCESS_KEY
+      - key: CF_SECRET_ACCESS_KEY
         sync: false
-      - key: AWS_STORAGE_BUCKET_NAME
+      - key: CF_BUCKET_NAME
         sync: false
-      - key: AWS_S3_ENDPOINT_URL
+      - key: CF_S3_ENDPOINT_URL
         sync: false
-      - key: AWS_S3_CUSTOM_DOMAIN
+      - key: CF_S3_CUSTOM_DOMAIN
         sync: false
-
-databases:
-  - name: upper-cumberland-cleanup-db
-    plan: starter
-    databaseName: putnam_trashmap
-    user: putnam