Gan, Jimmy 9992105b49 feat: RBAC multi-user role-based access control ...

- Add rbac.py with User model, LDAP group-to-role mapping, page/write dependencies
- Proxy auth reads Remote-Groups header to resolve role from LDAP groups
- JWT tokens carry role claim, /me returns role + allowed pages
- Per-router page access control and viewer write protection
- Terminal WebSocket RBAC check
- Frontend filters sidebar links and routes by allowed pages
- Admin-only Settings page and RBAC override endpoints
- Mount rbac.json in docker-compose for page config persistence

2026-03-01 14:13:43 +08:00

..

authelia_docker_compose.yml

feat: integrate Authelia SSO and update LLDAP routing

2026-02-27 23:04:57 +08:00

Caddyfile_nas

feat: RBAC multi-user role-based access control

2026-03-01 14:13:43 +08:00

Caddyfile_vps

feat: security hardening and HTTPS/SSO infrastructure configs

2026-02-28 22:25:39 +08:00

configuration.yml

chore: remove hardcoded secrets from configuration template

2026-02-28 22:22:23 +08:00

dnsmasq.conf

fix: use wildcard DNS for all *.jimmygan.com subdomains

2026-02-28 23:06:54 +08:00