admin/app-catalog-felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

CHANGELOG: R-747, R-774, R-734, R-624 (operator rulings 144, 148, 145, 146)
gates / gates (push) Successful in 8s
Details

Browse Source 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
This commit is contained in:
authentik Default Admin
2026-10-06 11:28:46 +02:00
parent aed80ee143
commit 1938921ae2
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+9
View File
@@ -1,3 +1,12 @@
## 2026-10-06 (midday) — the operator's ten answers: two page sentences, the immich marker list, a bench-only vaultwarden seed (R-747, R-774, R-734, R-624)
**What runs on a box changed:** one first-step sentence each on mealie's and Karakeep's page (hu + en). Nothing else a box runs.
- R-747 (decision 144): mealie's page says, as its last first step, that five wrong logins lock the account for 1-2 hours and to wait (hu + en; freeze admits the new string with the reason). Note: the 1-2 h holds only where the compose carries SECURITY_USER_LOCKOUT_TIME=1 (an installed mealie takes it at its next compose render).
- R-774 (decision 148): Karakeep's page says, as its last first step, that the official phone app sends crash reports to its makers through Sentry (hu + en; freeze reason extended).
- R-734 (decision 145): the update test keeps a per-app list of app-owned marker files its files_may_change mark ignores, each with its reason (immich's six 13-byte .immich folder markers first); a listed file is ignored only when changed/added and still <= 64 bytes, every other changed file still marks the step; the verdict names the ignored files. Harness version 5.
- R-624 (decision 146): on the test bench only, the update test seeds vaultwarden through its admin page (the admin token the bench generated for that run -> invite -> the invited address registers); a guard refuses anywhere else (bench venue + FELHOM_BENCH_ADMIN_SEED=1 + no /opt/docker/stacks); the run's .env is 0600 and shredded, and every printed line and evidence file is redacted of the run's secrets. zipline needed no held secret (its first-run /api/setup). The dead /api/accounts/register route is gone.
## 2026-10-06 (morning) — four apps see each visitor behind the tunnel; nextcloud's probe needs a finished install (R-776, R-613) — proven on 9202 first
**What runs on a box changed:** one environment line in four composes (kimai, zipline, vikunja, nextcloud) and one probe