Admin endpoint with install-time ENV key #40
Notifications
Total Time Spent: 2 minutes
poslop
2 minutes
No due date set.
Dependencies
No dependencies set.
Reference: poslop/palette#40
Reference in New Issue
Block a user
Add an /admin page+API protected by a preset key set via ENV var at install (e.g. PALETTE_ADMIN_KEY). Behavior: if ENV var set at startup, use it; if not set, generate a random string at first boot, persist it to a file under the data dir (root-only readable), and provide a way to reset it locally (CLI flag like --reset-admin-key or documented file deletion + restart). Admin page exposes runtime variables/settings (rate limits, expiry defaults, size caps, storage config). Must log admin access attempts.