98752fb33b
Security hardening: setup wizard, credential encryption, SSRF protection, token rotation, RBAC enforcement, and README overhaul - Replace hardcoded admin/admin with setup wizard (/setup) for initial account creation - Add AES-256-GCM encryption for stored API keys, SSH passwords, and bot identity data - Add SSRF protection (private IP blocking, DNS rebinding prevention) on all outbound URLs - Add refresh token reuse detection with automatic family revocation - Add rate limiting on auth endpoints (15 req/15min) - Add per-server access control middleware (UserServerAccess enforcement) - Add WebQuery command whitelist blocking destructive commands in bot flows - Add JWT startup guard (refuse to start in production with default secret) - Add WebSocket authentication via JWT query parameter - Add mandatory webhook secrets with timing-safe comparison - Add password complexity requirements (8+ chars, mixed case, digit) - Add ENCRYPTION_KEY env var to docker-compose files - Restrict JWT verification to HS256 algorithm - Restrict client IP visibility to admin role - Add parameter whitelists for instanceedit and serveredit - Bound widget cache size with periodic cleanup - Redact server version/platform in widget API - Rewrite README with updated features, setup instructions, and env vars
Clusterzx2026-02-25 16:06:00 +01:00
0aa6ce68db
Embeddable server status widgets with 6 themes (Dark, Light, transparent, Neon/Cyberpunk, Military, Minimal). Supports iframe, SVG and PNG output for forums, signatures and external websites.
Clusterzx2026-02-25 11:40:10 +01:00
15fd90e927
Fixed endless reconnection bug when a previously created bot had no server password, but the server has. Now fully error aware to the rejection reason.
Clusterzx2026-02-25 09:44:26 +01:00
9770cff1be
Added Password field to MusicBot
Clusterzx2026-02-25 09:31:42 +01:00
82ec163df4
Update Reamde "Quick Start" Part
Clusterzx2026-02-24 22:52:20 +01:00
31c87351f8
Missed the files for previous commit ... lol
Clusterzx2026-02-24 22:51:01 +01:00
d48b986065
Update Readme.md with images + recreated docker-compose with hub and local version
Clusterzx2026-02-24 22:50:31 +01:00