bokf - Self-hosted bookkeeping for Swedish organizations. C daemon, SQLite, JSON API.

Age	Commit message (Collapse)	Author
4 hours	web: bokftui in the browser (ttyd + bokfweb login gate); per-user login limitv0.1.69	Anders Betts
	New image bokf-web (Dockerfile target "web", compose service "web" on 127.0.0.1:8790): Caddy routing with forward_auth, the bokfweb login gate (C, authenticates with bokfd's session.open, per-address limit, cookie + terminal handle, one login handed to the TUI via /redeem) and ttyd running bokftui in web mode in an isolated throwaway HOME. TLS stays with the host's reverse proxy. BOKF_WEB=1 blocks every local file and viewer path in the TUI. bokfd's login limiter is now per user name instead of one global counter (5 wrong guesses from anyone locked out everybody), and a full counter table no longer disables it. The cross build and deploy.sh build and ship both images. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days	tls: load the system CA bundle explicitly under static OpenSSLv0.1.58	Anders Betts

6 days	Add token login to bokfctl and enforce admin scope for tokensv0.1.3	Anders Betts
	- bokfctl: --token / BOKFD_TOKEN via client_token_login - tokens must carry the admin scope for admin commands (was bypassed) - docs: token-based snapshot for restic backups
6 days	Add native TLS transport, TLS clients and lego cert sidecarv0.1.1	Anders Betts
	- bokfd: optional TLS listener (OpenSSL), certificate reload on change - clients: tls:host:port targets with chain and host verification - compose: port 8788 and an INWX/lego renewal sidecar - Makefile: header dependency tracking (-MMD -MP)
6 days	Initial commit: daemon, clients, docs, Docker deploy pipelinev0.1.0	Anders Betts