- Login page now sends Cache-Control: no-cache (prevent browser caching) - POST /login falls back to query string redirect param - Gitea redirect issue was caused by cached old login page without redirect field
- Add auth_proxy/auth_proxy.py: Python HTTP server, bcrypt password, HMAC-SHA256 token - Add auth_proxy/auth_proxy.service: systemd service on port 9002 - Update CHANGELOG.md: v1.1.0 with auth_proxy section - Security: basicauth replaced by session cookie (7 days, HttpOnly, SameSite=Lax) - Cross-subdomain cookie via Domain=.xybkwd.top