first commit

README.md

@@ -0,0 +1,22 @@
+# Eternity Project web server
+
+A Dockerized publishing service for eternityproject.fi. It provides local accounts, password hashing, authenticated publishing, and owner-only post editing. Content is persisted to SQLite in a named Docker volume.
+
+## Run it
+
+1. Copy `.env.example` to `.env` and replace `SECRET_KEY` with a long random string.
+2. Build and start the service:
+
+```sh
+docker compose up --build -d
+```
+
+Open `http://localhost:8000`, create the first account, and publish a field note. The first request initializes the database automatically.
+
+## Accounts and MFA
+
+The initial administrator account is `admin` with password `admin`, as requested for first-run access. Sign in, enroll MFA, and change this password before exposing the service to the internet. New registrations are held for approval in **Accounts**; accepted users must enroll a TOTP authenticator before they can publish.
+
+## Production notes
+
+Put this service behind a TLS reverse proxy for `eternityproject.fi` (for example Caddy or Nginx). Set a strong unique `SECRET_KEY`; the Compose file intentionally refuses to start without it. Back up the `eternity_data` Docker volume, which contains accounts and posts.