From 1abb7649b930d35d1f5a76fd72856659b1ee8275 Mon Sep 17 00:00:00 2001 From: Anders Betts Date: Wed, 23 Sep 2026 11:36:11 +0200 Subject: web: bokftui in the browser (ttyd + bokfweb login gate); per-user login limit New image bokf-web (Dockerfile target "web", compose service "web" on 127.0.0.1:8790): Caddy routing with forward_auth, the bokfweb login gate (C, authenticates with bokfd's session.open, per-address limit, cookie + terminal handle, one login handed to the TUI via /redeem) and ttyd running bokftui in web mode in an isolated throwaway HOME. TLS stays with the host's reverse proxy. BOKF_WEB=1 blocks every local file and viewer path in the TUI. bokfd's login limiter is now per user name instead of one global counter (5 wrong guesses from anyone locked out everybody), and a full counter table no longer disables it. The cross build and deploy.sh build and ship both images. Co-Authored-By: Claude Opus 5.5 --- deploy/Dockerfile.cross | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'deploy/Dockerfile.cross') diff --git a/deploy/Dockerfile.cross b/deploy/Dockerfile.cross index ab0504c..a14ac0f 100644 --- a/deploy/Dockerfile.cross +++ b/deploy/Dockerfile.cross @@ -1,12 +1,12 @@ -# Cross-compile the static arm64 backend binaries on an amd64 host. The -# runtime image is assembled later on the target host from the produced -# binaries; there is no TUI in the runtime image. +# Cross-compile the static arm64 binaries on an amd64 host: the backend +# (bokfd, bokfctl) and the web frontend's bokftui and bokfweb. The images +# are assembled later on the target host from the produced binaries. FROM debian:bookworm RUN dpkg --add-architecture arm64 \ && apt-get update \ && apt-get install -y --no-install-recommends \ make ca-certificates gcc-aarch64-linux-gnu \ - libc6-dev:arm64 libssl-dev:arm64 \ + libc6-dev:arm64 libssl-dev:arm64 libncurses-dev:arm64 \ && rm -rf /var/lib/apt/lists/* COPY cross-build.sh /usr/local/bin/cross-build RUN chmod 0755 /usr/local/bin/cross-build -- cgit v1.3