Lock bootstrap admin token until password is changed.

Closes #2: bootstrap JWTs cannot mutate admin APIs except change-password, production requires ADMIN_PASSWORD on first boot, admin binds loopback.
2026-09-01 03:54:09 +00:00
parent 6aabb76c16
commit 13070a275d
13 changed files with 445 additions and 40 deletions
@@ -5,7 +5,8 @@ services:
    restart: unless-stopped
    ports:
      - "80:80"
-      - "81:81"
+      # Admin binds 127.0.0.1; do not publish :81 on untrusted networks.
+      # - "81:81"
      - "443:443"
    volumes:
      - ./data:/app/data