summaryrefslogtreecommitdiff
path: root/compose.yaml
AgeCommit message (Collapse)Author
3 hoursweb: bokftui in the browser (ttyd + bokfweb login gate); per-user login limitv0.1.69Anders Betts
New image bokf-web (Dockerfile target "web", compose service "web" on 127.0.0.1:8790): Caddy routing with forward_auth, the bokfweb login gate (C, authenticates with bokfd's session.open, per-address limit, cookie + terminal handle, one login handed to the TUI via /redeem) and ttyd running bokftui in web mode in an isolated throwaway HOME. TLS stays with the host's reverse proxy. BOKF_WEB=1 blocks every local file and viewer path in the TUI. bokfd's login limiter is now per user name instead of one global counter (5 wrong guesses from anyone locked out everybody), and a full counter table no longer disables it. The cross build and deploy.sh build and ship both images. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 daysdeploy: pass BOKFD_SECRET_KEY through compose; document waves 1-2Anders Betts
6 dayscerts: use lego v5 run subcommand flagsv0.1.2Anders Betts
6 daysAdd native TLS transport, TLS clients and lego cert sidecarv0.1.1Anders Betts
- bokfd: optional TLS listener (OpenSSL), certificate reload on change - clients: tls:host:port targets with chain and host verification - compose: port 8788 and an INWX/lego renewal sidecar - Makefile: header dependency tracking (-MMD -MP)
6 daysInitial commit: daemon, clients, docs, Docker deploy pipelinev0.1.0Anders Betts