Gan, Jimmy c7a0a53fe8 security: harden dashboard (SSH keys, auth, uploads, CORS, non-root) ...

Remove SSH private keys from git, add SECRET_KEY validation, move WS
auth from query string to first message, add session limits/idle timeout,
PBKDF2 Fernet key, refresh token rotation, TOTP replay protection,
file upload size limit + filename sanitization, symlink safety check,
restrict CORS methods, IP-gate OpenClaw token, run container as non-root,
rate-limit refresh/passkey endpoints, sanitize Gitea path params.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-02-26 17:22:25 +08:00

..

__init__.py

Add NAS dashboard MVP: Docker mgmt, Gitea, Files, Terminal

2026-02-19 01:59:50 +08:00

auth.py

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00

docker_router.py

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00

files.py

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00

gitea.py

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00

system.py

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00

terminal.py

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00