fix(security): harden auth and uploads

2026-07-02 17:21:13 +08:00
parent 4675548fce
commit 220fcbc4ce
3 changed files with 141 additions and 23 deletions
@@ -0,0 +1,10 @@
+# Copy to .env for local deployment.
+# Generate SECRET_KEY with: python -c "import secrets; print(secrets.token_hex(32))"
+SECRET_KEY=
+
+# Set ADMIN_PASSWORD to create or rotate the admin account on startup.
+ADMIN_USERNAME=admin
+ADMIN_PASSWORD=
+
+# Default: 16 MiB
+MAX_UPLOAD_BYTES=16777216