12 Commits

Author	SHA1	Message	Date
Gan, Jimmy	c676c84bc1	feat: add chat group daily summarizer ... - Telegram collector (Telethon MTProto) with checkpoint-based message fetching - Claude API summarization via proxy (haiku model) - Dashboard page with date picker, markdown summary, raw message drill-down - Separate container lifecycle from dashboard for stable Telethon sessions - Shared SQLite DB mounted read-only into dashboard	2026-02-27 02:51:52 +08:00
Gan, Jimmy	394a1aa367	security: harden dashboard (SSH keys, auth, uploads, CORS, non-root) ... Remove SSH private keys from git, add SECRET_KEY validation, move WS auth from query string to first message, add session limits/idle timeout, PBKDF2 Fernet key, refresh token rotation, TOTP replay protection, file upload size limit + filename sanitization, symlink safety check, restrict CORS methods, IP-gate OpenClaw token, run container as non-root, rate-limit refresh/passkey endpoints, sanitize Gitea path params. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-02-26 17:22:25 +08:00
Gan, Jimmy	a265c6ffb0	Use docker save/load for cross-build deploy from M1 to NAS	2026-02-21 11:05:00 +08:00
Gan, Jimmy	370417b37d	Switch to cross-build from M1 via Gitea container registry	2026-02-21 00:40:46 +08:00
Gan, Jimmy	dd3e8e0d2c	security: remove hardcoded secrets, add health endpoint, add security headers	2026-02-20 22:04:01 +08:00
Gan, Jimmy	7aec5976df	fix: resolve OpenClaw iframe connection refused and Docker HTTP proxy conflict	2026-02-20 17:25:16 +08:00
Gan, Jimmy	ec2f60fb2f	fix: add proxy support to httpx to allow Telegram API requests	2026-02-20 10:36:59 +08:00
Gan, Jimmy	a882f45f2e	Add multi-host terminal: NAS + VPS side-by-side	2026-02-20 00:53:29 +08:00
Gan, Jimmy	c345f647c7	Fix deploy: use absolute path for SSH key bind mount	2026-02-20 00:25:17 +08:00
Gan, Jimmy	64ecd99dc7	Add OpenClaw, backup automation, health checks, Telegram notifications ... Phase 6: OpenClaw docker-compose (port 3100) with health check Phase 9: Enhanced backup.sh with full DB/config coverage + Telegram alerts Phase 10: Health checks on all compose files, /api/system/notify endpoint	2026-02-19 21:40:34 +08:00
Gan, Jimmy	ee2e5dcb3c	Terminal: SSH to NAS host instead of container shell ... - Rewrite terminal.py to use asyncssh instead of pty/fork - Add SSH key pair for dashboard container auth - Mount SSH key and add SSH config vars in docker-compose - Install openssh-client in Dockerfile - Add asyncssh to requirements.txt	2026-02-19 19:24:38 +08:00
Gan, Jimmy	70aa421d7f	Add NAS dashboard MVP: Docker mgmt, Gitea, Files, Terminal	2026-02-19 01:59:50 +08:00