4454744cba
- New HIY_ADMIN_USER / HIY_ADMIN_PASS env vars control access - Login page at /login with redirect-after-login support - Cookie-based sessions (HttpOnly, SameSite=Strict); cleared on restart - Auth middleware applied to all routes except /webhook/:app_id (HMAC) and /login - Auth is skipped when credentials are not configured (dev mode, warns at startup) - Logout link in both dashboard nav bars - Caddy admin port 2019 no longer published to the host in docker-compose https://claude.ai/code/session_01FKCW3FDjNFj6jve4niMFXH
9 lines
322 B
Text
9 lines
322 B
Text
# Your domain — apps will be served at <name>.yourdomain.com
|
|
DOMAIN_SUFFIX=yourdomain.com
|
|
|
|
# Optional: email for Let's Encrypt expiry notices.
|
|
# If you want this, uncomment the `email` line in proxy/Caddyfile instead.
|
|
|
|
# Dashboard login credentials (required in production).
|
|
HIY_ADMIN_USER=admin
|
|
HIY_ADMIN_PASS=changeme
|