195954ca19
fix: auth_proxy Cache-Control no-cache + POST redirect fallback
...
- Login page now sends Cache-Control: no-cache (prevent browser caching)
- POST /login falls back to query string redirect param
- Gitea redirect issue was caused by cached old login page without redirect field
2026-06-15 20:27:31 +08:00
438245af12
rollback: revert auth_proxy, restore direct proxy
2026-06-15 19:57:44 +08:00
858a94811c
auth: add auth_proxy v2 with cookie session auth
...
- Add auth_proxy/auth_proxy.py: Python HTTP server, bcrypt password, HMAC-SHA256 token
- Add auth_proxy/auth_proxy.service: systemd service on port 9002
- Update CHANGELOG.md: v1.1.0 with auth_proxy section
- Security: basicauth replaced by session cookie (7 days, HttpOnly, SameSite=Lax)
- Cross-subdomain cookie via Domain=.xybkwd.top
2026-06-15 19:31:37 +08:00
df7d64d205
fix: remove basicauth from memo.xybkwd.top (has own auth)
2026-06-15 09:31:58 +08:00
846dcf7070
fix: add missing brief.xybkwd.top with basicauth
2026-06-15 09:09:56 +08:00
d26ec73fd9
docs: add Lucky cleanup and security audit timeline entry
2026-06-15 09:03:51 +08:00
099f0241a9
security: add Caddyfile with basicauth config
2026-06-15 09:03:29 +08:00
e253af8dcc
docs: add Calibre-Web timeline entry (restore full content)
2026-06-15 08:29:54 +08:00
29b09f4d4c
fix: repair corrupted Calibre-Web timeline entry
2026-06-15 08:13:42 +08:00
aefb05cf45
docs: add server services deployment timeline
2026-06-15 00:54:32 +08:00
0c3f9e25ac
decisions: 夜间自动化收尾双任务
2026-06-14 22:11:17 +08:00
527fc610d8
v1.0.0: 初始化 — README/CHANGELOG/DECISION_LOG + 首份每日总结(2026-06-14)
2026-06-14 22:01:42 +08:00
345fe5a497
Initial commit
2026-06-14 22:00:59 +08:00
