| Age | Commit message (Collapse) | Author |
|---|
|
The locale directory the cross build now copies came out root-owned, so
deploy.sh could not remove .prebuilt and stopped before switching the
containers. Running the container with the caller's uid keeps the output
deletable.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
|
|
The cross-built bokftui is static glibc; in the Alpine web image it found
no locale data, setlocale() failed and åäö were invalid bytes. The cross
build now copies Debian's C.utf8 into the image and the image build runs
bokfweb --check-locale, so a TUI without UTF-8 fails the build.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
|
|
New image bokf-web (Dockerfile target "web", compose service "web" on
127.0.0.1:8790): Caddy routing with forward_auth, the bokfweb login gate
(C, authenticates with bokfd's session.open, per-address limit, cookie +
terminal handle, one login handed to the TUI via /redeem) and ttyd running
bokftui in web mode in an isolated throwaway HOME. TLS stays with the
host's reverse proxy. BOKF_WEB=1 blocks every local file and viewer path in
the TUI. bokfd's login limiter is now per user name instead of one global
counter (5 wrong guesses from anyone locked out everybody), and a full
counter table no longer disables it. The cross build and deploy.sh build
and ship both images.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
|
|
|
|
|
|
The target only assembles the image from prebuilt binaries, so redeploys
no longer compile sqlite/argon2 on the NAS. New deploy/Dockerfile.cross
provides the gcc-aarch64-linux-gnu toolchain; the Dockerfile uses
.prebuilt/ when present.
|
|
- bokfd: optional TLS listener (OpenSSL), certificate reload on change
- clients: tls:host:port targets with chain and host verification
- compose: port 8788 and an INWX/lego renewal sidecar
- Makefile: header dependency tracking (-MMD -MP)
|
|
|
