24f126220d
docs: daily log 2026-06-15 - auth architecture + Calibre-Web + all lessons
2026-06-15 21:31:33 +08:00
5618fb7e6e
docs: milestone V1 updated with Calibre-Web config + all lessons learned
...
Full today experience documented:
- Token audit: GLM 5.0 Turbo consumed 1600+ credits
- Auth proxy design & 3-service crash rollback
- Cookie + basicauth dual auth finalized
- Git-First deployment principle
- Calibre-Web deployment & 4 configuration pitfalls
- Complete debug commands and recovery steps
2026-06-15 21:31:20 +08:00
a6e85c69d3
docs: milestone V1 snapshot - full service state, auth architecture, recovery guide
2026-06-15 20:36:01 +08:00
195954ca19
fix: auth_proxy Cache-Control no-cache + POST redirect fallback
...
- Login page now sends Cache-Control: no-cache (prevent browser caching)
- POST /login falls back to query string redirect param
- Gitea redirect issue was caused by cached old login page without redirect field
2026-06-15 20:27:31 +08:00
438245af12
rollback: revert auth_proxy, restore direct proxy
2026-06-15 19:57:44 +08:00
858a94811c
auth: add auth_proxy v2 with cookie session auth
...
- Add auth_proxy/auth_proxy.py: Python HTTP server, bcrypt password, HMAC-SHA256 token
- Add auth_proxy/auth_proxy.service: systemd service on port 9002
- Update CHANGELOG.md: v1.1.0 with auth_proxy section
- Security: basicauth replaced by session cookie (7 days, HttpOnly, SameSite=Lax)
- Cross-subdomain cookie via Domain=.xybkwd.top
2026-06-15 19:31:37 +08:00
df7d64d205
fix: remove basicauth from memo.xybkwd.top (has own auth)
2026-06-15 09:31:58 +08:00
846dcf7070
fix: add missing brief.xybkwd.top with basicauth
2026-06-15 09:09:56 +08:00
d26ec73fd9
docs: add Lucky cleanup and security audit timeline entry
2026-06-15 09:03:51 +08:00
099f0241a9
security: add Caddyfile with basicauth config
2026-06-15 09:03:29 +08:00
e253af8dcc
docs: add Calibre-Web timeline entry (restore full content)
2026-06-15 08:29:54 +08:00
29b09f4d4c
fix: repair corrupted Calibre-Web timeline entry
2026-06-15 08:13:42 +08:00
aefb05cf45
docs: add server services deployment timeline
2026-06-15 00:54:32 +08:00
0c3f9e25ac
decisions: 夜间自动化收尾双任务
2026-06-14 22:11:17 +08:00
527fc610d8
v1.0.0: 初始化 — README/CHANGELOG/DECISION_LOG + 首份每日总结(2026-06-14)
2026-06-14 22:01:42 +08:00
345fe5a497
Initial commit
2026-06-14 22:00:59 +08:00