Gan, Jimmy 394a1aa367 security: harden dashboard (SSH keys, auth, uploads, CORS, non-root) ...

Remove SSH private keys from git, add SECRET_KEY validation, move WS
auth from query string to first message, add session limits/idle timeout,
PBKDF2 Fernet key, refresh token rotation, TOTP replay protection,
file upload size limit + filename sanitization, symlink safety check,
restrict CORS methods, IP-gate OpenClaw token, run container as non-root,
rate-limit refresh/passkey endpoints, sanitize Gitea path params.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-02-26 17:22:25 +08:00

.gitea/workflows

CI: add build step to deploy workflow

2026-02-25 21:14:00 +08:00

dashboard

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00

immich

Add OpenClaw, backup automation, health checks, Telegram notifications

2026-02-19 21:40:34 +08:00

n8n

Add n8n docker-compose and include in backup

2026-02-26 14:58:42 +08:00

navidrome

Add OpenClaw, backup automation, health checks, Telegram notifications

2026-02-19 21:40:34 +08:00

openclaw

feat: add claude-dev docker setup & update openclaw config

2026-02-20 09:19:36 +08:00

.env.example

Add OpenClaw, backup automation, health checks, Telegram notifications

2026-02-19 21:40:34 +08:00

.gitignore

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00

backup.sh

Add n8n docker-compose and include in backup

2026-02-26 14:58:42 +08:00

CLAUDE.md

Add CLAUDE.md for shared project context

2026-02-25 02:09:04 +08:00

notify.sh

Add OpenClaw, backup automation, health checks, Telegram notifications

2026-02-19 21:40:34 +08:00

PLAN.md

Clean up: remove stale scripts/docs, fix debug prints, update PLAN.md

2026-02-24 10:14:48 +08:00

S

Description

No description provided

4.2 MiB

Languages

Python 58.2%

Svelte 32.2%

JavaScript 5.6%

Shell 3.3%

Dockerfile 0.3%

Other 0.3%