Admin endpoint with install-time ENV key #40

Closed
opened 2026-09-09 02:10:10 +00:00 by poslop · 0 comments
Owner

Add an /admin page+API protected by a preset key set via ENV var at install (e.g. PALETTE_ADMIN_KEY). Behavior: if ENV var set at startup, use it; if not set, generate a random string at first boot, persist it to a file under the data dir (root-only readable), and provide a way to reset it locally (CLI flag like --reset-admin-key or documented file deletion + restart). Admin page exposes runtime variables/settings (rate limits, expiry defaults, size caps, storage config). Must log admin access attempts.

Add an /admin page+API protected by a preset key set via ENV var at install (e.g. PALETTE_ADMIN_KEY). Behavior: if ENV var set at startup, use it; if not set, generate a random string at first boot, persist it to a file under the data dir (root-only readable), and provide a way to reset it locally (CLI flag like --reset-admin-key or documented file deletion + restart). Admin page exposes runtime variables/settings (rate limits, expiry defaults, size caps, storage config). Must log admin access attempts.
poslop added spent time 2 minutes 2026-09-09 05:44:10 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Total Time Spent: 2 minutes
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: poslop/palette#40