Setup gate on 28 more apps; signup_block on 11 (decision 47); claper R-713 base64; FIRST-ADMIN current

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-09-29 11:08:56 +02:00
parent d0e7e2eb51
commit 6faf432e22
37 changed files with 287 additions and 55 deletions
@@ -47,6 +47,15 @@ deploy_fields:
    generate: "password:24"
    locked_after_deploy: true

+# --- The setup gate (controller >= 0.281.0, `09` §3 decisions 46-47) ---
+# The first visitor would create the admin; a fresh install is closed to everyone but the household until the first setup is done.
+setup_gate: true
+# measured on 9202 2026-09-29: firstSetup true -> false once the first user exists (/api/setup itself answers 403 after the setup, so it cannot be the check).
+setup_done_probe:
+  url: http://zipline:3000/api/server/public
+  field: firstSetup
+  done: "false"
+
 # --- App info (info page content) ---
 app_info:
  tagline: "Screenshot és fájlmegosztó szerver ShareX/Flameshot integrációval"