thuttu/docker-ep-web-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add sfsr protection and admin pwd change script for powershell

Browse Source
This commit is contained in:
thuttu
2026-08-29 20:07:00 +03:00
parent 8a2cbe5b8b
commit 4512f78033
13 changed files with 118 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
TODO.md
+3 -3
View File
@@ -4,8 +4,8 @@
- [x] Local accounts, administrator approval, and TOTP MFA.
- [x] QR-based MFA enrollment for iPhone and Android authenticators.
- [x] Email addresses, member password changes, and expiring password-reset links.
- [ ] Configure production SMTP credentials and verify outgoing email delivery.
- [ ] Change the initial `admin` password and enroll its authenticator.
- [ ] Add CSRF protection to all state-changing forms.
- [ ] Configure production SMTP credentials and verify outgoing email delivery. See the SMTP delivery steps in [README.md](README.md); complete after the test email is received.
- [ ] Run `./scripts/rotate-admin.ps1`, then sign in as `admin` and scan the new MFA QR code to complete authenticator enrollment.
- [x] Add CSRF protection to all state-changing forms.
- [ ] Add automated database backups and test restoration.
- [ ] Configure TLS reverse proxy and production domain for `eternityproject.fi`.