account system and syslogs

This commit is contained in:
2026-07-26 18:31:43 +00:00
parent 540f6e0af1
commit 6f7af751e1
37 changed files with 2475 additions and 258 deletions
+11 -4
View File
@@ -1,10 +1,17 @@
# Admin panel login (server only; required in production)
# Admin panel bootstrap (server only). Used once to create the admin account
# in data/admin-accounts.json. After bootstrap, change the password in Settings.
ADMIN_USERNAME=admin
ADMIN_PASSWORD=change-me-to-a-strong-password
# Read-only supervisor login (server only; can view all data but cannot modify)
SUPERVISOR_USERNAME=supervisor
SUPERVISOR_PASSWORD=change-me-to-a-strong-password
# Optional: HMAC secret for signed session cookies. Defaults to a value derived
# from ADMIN_PASSWORD when unset.
# ADMIN_SESSION_SECRET=
# Optional: absolute path for the accounts JSON file (default: <cwd>/data/admin-accounts.json)
# ADMIN_ACCOUNTS_PATH=
# Optional: absolute path for the panel audit log (default: <cwd>/data/admin-audit.jsonl)
# ADMIN_AUDIT_LOG_PATH=
# Optional: public site URL when reverse proxy does not send X-Forwarded-* (fixes post-login redirects).
# Example: https://kickkings.playpoolstudios.com