Gan, Jimmy 4201917e17 fix: harden dashboard RBAC and cookie auth flows ...

Restrict Docker/Files writes to admins, move terminal websocket auth to cookie-first with temporary query fallback, and migrate refresh-token handling to httpOnly cookies for safer session persistence.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-09 23:44:23 +08:00

.gitea/workflows

fix: sync dashboard compose files during CI deploy

2026-03-06 08:43:01 +08:00

cc-connect

fix: use compose-compatible env_file format

2026-03-02 01:11:58 +08:00

chat-summarizer

feat: add chat group daily summarizer

2026-02-27 02:51:52 +08:00

claude-dev

fix: add tmux to claude-dev tooling

2026-03-07 11:00:58 +08:00

dashboard

fix: harden dashboard RBAC and cookie auth flows

2026-03-09 23:44:23 +08:00

gitea

security: bind service ports to localhost only

2026-02-28 22:47:36 +08:00

immich

fix: comprehensive dark mode support across all pages

2026-03-01 14:59:23 +08:00

info-engine

feat: add info engine MVP pipeline and dashboard page

2026-03-02 23:35:10 +08:00

litellm

fix: attach litellm to shared dashboard network

2026-03-02 03:31:44 +08:00

n8n

security: bind service ports to localhost only

2026-02-28 22:47:36 +08:00

navidrome

feat: watchtower tracking, dev environment, security logs page

2026-03-01 00:40:14 +08:00

openclaw

feat: watchtower tracking, dev environment, security logs page

2026-03-01 00:40:14 +08:00

tmp_remote

fix: add dev dashboard caddy route

2026-03-07 11:50:56 +08:00

watchtower

fix: route watchtower SMTP through SSH tunnel to bypass GFW

2026-03-01 01:07:47 +08:00

typo, consolidate user management, compact bottom bar\",\"head\":\"dev\",\"base\":\"main\"}" | python3 -c "import sys,json; d=json.load(sys.stdin); print(\"PR #\" + str(d.get(\"number\",\"?\")) + \":\", d.get(\"state\",d.get(\"message\")))"

feat: add role-based sidebar link visibility control

2026-03-01 18:17:45 +08:00

.env.example

Add OpenClaw, backup automation, health checks, Telegram notifications

2026-02-19 21:40:34 +08:00

.gitignore

chore: remove hardcoded secrets from configuration template

2026-02-28 22:22:23 +08:00

backup.sh

Add n8n docker-compose and include in backup

2026-02-26 14:58:42 +08:00

CLAUDE.md

feat: add CI-gated claude-dev image package

2026-03-02 23:40:44 +08:00

ENV_HANDOFF_PLAN_AND_BLOCKERS.md

docs: add environment handoff plan and blockers

2026-03-03 15:30:19 +00:00

notify.sh

Add OpenClaw, backup automation, health checks, Telegram notifications

2026-02-19 21:40:34 +08:00

PLAN.md

feat: add cc-connect dashboard health integration

2026-03-02 23:24:03 +08:00

SECURITY_EXECUTION_PLAN.md

feat: security hardening and HTTPS/SSO infrastructure configs

2026-02-28 22:25:39 +08:00

S

Description

No description provided

4.2 MiB

Languages

Python 58.2%

Svelte 32.2%

JavaScript 5.6%

Shell 3.3%

Dockerfile 0.3%

Other 0.3%