| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 71 min. | web: bokftui in the browser (ttyd + bokfweb login gate); per-user login limitv0.1.69 | Anders Betts | |
| New image bokf-web (Dockerfile target "web", compose service "web" on 127.0.0.1:8790): Caddy routing with forward_auth, the bokfweb login gate (C, authenticates with bokfd's session.open, per-address limit, cookie + terminal handle, one login handed to the TUI via /redeem) and ttyd running bokftui in web mode in an isolated throwaway HOME. TLS stays with the host's reverse proxy. BOKF_WEB=1 blocks every local file and viewer path in the TUI. bokfd's login limiter is now per user name instead of one global counter (5 wrong guesses from anyone locked out everybody), and a full counter table no longer disables it. The cross build and deploy.sh build and ship both images. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> | |||
| 3 days | deploy: cross-compile static aarch64 for the Alpine imagev0.1.54 | Anders Betts | |
| 3 days | deploy: alpine runtime image with the daemon and CLI onlyv0.1.45 | Anders Betts | |
| 5 days | deploy: cross-compile arm64 binaries on the dev machinev0.1.13 | Anders Betts | |
| The target only assembles the image from prebuilt binaries, so redeploys no longer compile sqlite/argon2 on the NAS. New deploy/Dockerfile.cross provides the gcc-aarch64-linux-gnu toolchain; the Dockerfile uses .prebuilt/ when present. | |||
| 6 days | Add native TLS transport, TLS clients and lego cert sidecarv0.1.1 | Anders Betts | |
| - bokfd: optional TLS listener (OpenSSL), certificate reload on change - clients: tls:host:port targets with chain and host verification - compose: port 8788 and an INWX/lego renewal sidecar - Makefile: header dependency tracking (-MMD -MP) | |||
| 6 days | Initial commit: daemon, clients, docs, Docker deploy pipelinev0.1.0 | Anders Betts | |
