diff options
| author | Anders Betts <anders.betts@gmail.com> | 2026-09-23 11:36:11 +0200 |
|---|---|---|
| committer | Anders Betts <anders.betts@gmail.com> | 2026-09-23 11:36:11 +0200 |
| commit | 1abb7649b930d35d1f5a76fd72856659b1ee8275 (patch) | |
| tree | 50d1d3dd905056b75749e22a58e7247e4a4bb0e2 /docs/STATE.md | |
| parent | 71a702f375750829c634b552217c9925d549828b (diff) | |
| download | bokf-1abb7649b930d35d1f5a76fd72856659b1ee8275.tar.gz bokf-1abb7649b930d35d1f5a76fd72856659b1ee8275.zip | |
web: bokftui in the browser (ttyd + bokfweb login gate); per-user login limitv0.1.69
New image bokf-web (Dockerfile target "web", compose service "web" on
127.0.0.1:8790): Caddy routing with forward_auth, the bokfweb login gate
(C, authenticates with bokfd's session.open, per-address limit, cookie +
terminal handle, one login handed to the TUI via /redeem) and ttyd running
bokftui in web mode in an isolated throwaway HOME. TLS stays with the
host's reverse proxy. BOKF_WEB=1 blocks every local file and viewer path in
the TUI. bokfd's login limiter is now per user name instead of one global
counter (5 wrong guesses from anyone locked out everybody), and a full
counter table no longer disables it. The cross build and deploy.sh build
and ship both images.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to 'docs/STATE.md')
| -rw-r--r-- | docs/STATE.md | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/docs/STATE.md b/docs/STATE.md index 77ef9a4..93ade1e 100644 --- a/docs/STATE.md +++ b/docs/STATE.md @@ -14,6 +14,16 @@ unit tests and the docs consistency check. ## Resume here (2026-09-23) +- **Web frontend (2026-09-23, branch `feat/web-frontend`, not deployed)**: + image `bokf-web` (Caddy routing + `bokfweb` login gate + ttyd + + bokftui in web mode) as compose service `web` on `127.0.0.1:8790`; see + DEPLOY.md "Web frontend" and decision #30. Tested end to end locally + (login, one-login handoff, foreign handle 403, logout, per-address + limit) and the aarch64 static build. **To go live**: deploy, then add + the `bokf.makandra.eu` block to the NAS Caddy + (`/mnt/data/caddy/Caddyfile`) and reload it. bokfd's login limiter is + now per user name (was global: 5 wrong guesses locked out everyone). + Next: file upload/download through the browser for the web mode. - **Context menu and web-safe keys (2026-09-23, branch `eff/context-menu`)**: `→` (or `^O`, also in table cells) opens "Åtgärder", a box at the right edge with every action of the view and |