jeremy
8715589cbb
- /admin: first-visit password setup (scrypt), signed 30-day session cookie, calendars add/remove/reorder/rename/color/hide, masked URLs, per-feed test, history (20) with restore; /photo-admin -> /admin#photos placeholder - settings in local /data (settings.json + auth.json + history/), seeded once from the calendar secret; dashboard + health read from settings - start.mjs drops privileges after reading secrets and runs a front proxy that stamps the real client IP; admin refuses non-LAN and proxied requests - deploy: HOBBS_DATA_DIR=/var/lib/hobbs-organizer/data, image 1.1.0 (1.0.0 kept) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01E9NnVEico3WvFxLyjy1iW3
26 lines
984 B
Bash
26 lines
984 B
Bash
# Hobbs' Family Organizer - nonsecret runtime settings
|
|
# Copy this file to .env. Keep private calendar URLs and the access token in
|
|
# ./secrets; never put either value in this file.
|
|
|
|
# Docker publishes the app on this server address and port. Set the bind
|
|
# address to a specific LAN interface if you do not want to listen everywhere.
|
|
HOBBS_BIND_ADDRESS=0.0.0.0
|
|
HOBBS_HTTP_PORT=8340
|
|
|
|
# Display and calendar defaults.
|
|
ORGANIZER_TIMEZONE=America/Chicago
|
|
|
|
# Seven-day forecast defaults for Sapulpa, Oklahoma.
|
|
WEATHER_LOCATION="Sapulpa, OK"
|
|
WEATHER_LATITUDE=35.9987
|
|
WEATHER_LONGITUDE=-96.11417
|
|
NWS_FORECAST_URL=https://api.weather.gov/gridpoints/TSA/37,98/forecast
|
|
|
|
# The National Weather Service asks clients to identify themselves. Replace
|
|
# the example contact with an address monitored by the server operator.
|
|
WEATHER_USER_AGENT="Hobbs-Family-Organizer/1.0 (self-hosted)"
|
|
|
|
# Admin (v1.1.0)
|
|
HOBBS_DATA_DIR=/var/lib/hobbs-organizer/data
|
|
ADMIN_ALLOWED_CIDRS=192.168.86.0/24,127.0.0.1/32
|