summaryrefslogtreecommitdiff
path: root/docs/DEPLOY.md
AgeCommit message (Collapse)Author
76 min.web: ship glibc C.utf8 so the web TUI shows åäöAnders Betts
The cross-built bokftui is static glibc; in the Alpine web image it found no locale data, setlocale() failed and åäö were invalid bytes. The cross build now copies Debian's C.utf8 into the image and the image build runs bokfweb --check-locale, so a TUI without UTF-8 fails the build. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
92 min.web: bokftui in the browser (ttyd + bokfweb login gate); per-user login limitv0.1.69Anders Betts
New image bokf-web (Dockerfile target "web", compose service "web" on 127.0.0.1:8790): Caddy routing with forward_auth, the bokfweb login gate (C, authenticates with bokfd's session.open, per-address limit, cookie + terminal handle, one login handed to the TUI via /redeem) and ttyd running bokftui in web mode in an isolated throwaway HOME. TLS stays with the host's reverse proxy. BOKF_WEB=1 blocks every local file and viewer path in the TUI. bokfd's login limiter is now per user name instead of one global counter (5 wrong guesses from anyone locked out everybody), and a full counter table no longer disables it. The cross build and deploy.sh build and ship both images. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 daysdeploy: cross-compile static aarch64 for the Alpine imagev0.1.54Anders Betts
3 daysdeploy: pass BOKFD_SECRET_KEY through compose; document waves 1-2Anders Betts
3 daysdeploy: alpine runtime image with the daemon and CLI onlyv0.1.45Anders Betts
5 daysscripts: bokftui-bw item selection (argument or picker)Anders Betts
5 daysdeploy: --dev hot-reloads the daemon via docker cp + SIGHUPv0.1.14Anders Betts
- bokfd re-execs its own binary on SIGHUP, closing listeners/db first - scripts/deploy.sh --dev cross-builds and copies binaries into the running container, then verifies the reported version
6 daysscripts: probe and set the Node Web Crypto flag for bwAnders Betts
6 daysscripts: replace sudo credential wrapper with a Bitwarden launcherAnders Betts
brw/bw lookup in user space; optional token via custom field
6 daysbokftui: remember server/user, BOKFD_TOKEN auto-login, sudo credential launcherv0.1.4Anders Betts
6 daysdocs: export backup token before docker compose execAnders Betts
6 daysAdd token login to bokfctl and enforce admin scope for tokensv0.1.3Anders Betts
- bokfctl: --token / BOKFD_TOKEN via client_token_login - tokens must carry the admin scope for admin commands (was bypassed) - docs: token-based snapshot for restic backups
6 daysAdd native TLS transport, TLS clients and lego cert sidecarv0.1.1Anders Betts
- bokfd: optional TLS listener (OpenSSL), certificate reload on change - clients: tls:host:port targets with chain and host verification - compose: port 8788 and an INWX/lego renewal sidecar - Makefile: header dependency tracking (-MMD -MP)
6 daysInitial commit: daemon, clients, docs, Docker deploy pipelinev0.1.0Anders Betts
generated by cgit v1.3 (git 2.53.0) at 2026-09-23 11:07:52 +0000