ZdenekSrotyr 96bd06ba00 feat(auth): optional SEED_ADMIN_PASSWORD to pre-hash seed admin (dev helper) ... Terraform gains enable_seed_password + seed_admin_password (sensitive) vars on the customer-instance module; when enabled the password is piped via startup-script into /opt/agnes/.env as SEED_ADMIN_PASSWORD. On first boot app/main.py argon2-hashes it onto the seed user so the admin can log in immediately without going through /auth/bootstrap. Never overwrites an existing password_hash — safe against accidental reset on terraform apply.		2026-04-21 21:32:22 +02:00
..
api	feat(ui): version badge in footer + /api/version endpoint	2026-04-21 20:19:40 +02:00
auth	fix(auth): /auth/bootstrap activates seed users, disabled only by real password	2026-04-21 20:01:20 +02:00
web	feat(ui): version badge as shared partial, injected into every full-page template	2026-04-21 20:51:55 +02:00
__init__.py	feat: add FastAPI server with auth, RBAC, and all API endpoints	2026-03-27 15:19:18 +01:00
instance_config.py	fix: address PR review findings — config write, CalVer, error handling	2026-04-10 13:16:40 +02:00
main.py	feat(auth): optional SEED_ADMIN_PASSWORD to pre-hash seed admin (dev helper)	2026-04-21 21:32:22 +02:00
secrets.py	fix: address Devin review round 5 — empty secret file, CI .env	2026-04-10 14:55:31 +02:00
utils.py	feat: add graceful shutdown handler	2026-04-09 07:03:45 +02:00