docker-ep-web-server/TODO.md

Eternity Project TODO

• Dockerized Flask publishing service with persistent storage.
• Local accounts, administrator approval, and TOTP MFA.
• QR-based MFA enrollment for iPhone and Android authenticators.
• Email addresses, member password changes, and expiring password-reset links.
• Configure production SMTP credentials and verify outgoing email delivery.
• Rotate the initial admin password and enroll its authenticator.
• Add CSRF protection to all state-changing forms.
• Add automated database backups and test restoration.
• Configure TLS reverse proxy and production domain for eternityproject.fi.