Gan, Jimmy 9992105b49 feat: RBAC multi-user role-based access control ...

- Add rbac.py with User model, LDAP group-to-role mapping, page/write dependencies
- Proxy auth reads Remote-Groups header to resolve role from LDAP groups
- JWT tokens carry role claim, /me returns role + allowed pages
- Per-router page access control and viewer write protection
- Terminal WebSocket RBAC check
- Frontend filters sidebar links and routes by allowed pages
- Admin-only Settings page and RBAC override endpoints
- Mount rbac.json in docker-compose for page config persistence

2026-03-01 14:13:43 +08:00

..

__init__.py

Add NAS dashboard MVP: Docker mgmt, Gitea, Files, Terminal

2026-02-19 01:59:50 +08:00

auth.py

feat: RBAC multi-user role-based access control

2026-03-01 14:13:43 +08:00

chat_summary.py

feat: add chat group daily summarizer

2026-02-27 02:51:52 +08:00

docker_router.py

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00

files.py

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00

gitea.py

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00

security.py

fix: disable Caddy log fetching - causes Docker API timeouts

2026-03-01 12:54:00 +08:00

system.py

fix: trust docker gateway IP for reverse proxy auth

2026-02-27 23:48:34 +08:00

terminal.py

feat: RBAC multi-user role-based access control

2026-03-01 14:13:43 +08:00