docker-ep-web-server/TODO.md

Eternity Project TODO

• Dockerized Flask publishing service with persistent storage.
• Local accounts, administrator approval, and TOTP MFA.
• QR-based MFA enrollment for iPhone and Android authenticators.
• Email addresses, member password changes, and expiring password-reset links.
• Configure production SMTP credentials and verify outgoing email delivery.
• Rotate the initial admin password and enroll its authenticator.
• Add CSRF protection to all state-changing forms.
• Add automated database backups and test restoration.
• Configure TLS reverse proxy and production domain for eternityproject.fi.
• Add validated post image uploads with an in-article preview and click-to-expand view.
• Add ordered inline step images with captions for long-form repair and engineering posts.
• Add code snippets to long-form stories.
• Allow users to change their email addresses.
• Add user email verification for registration and email-address changes.
• Add user real names and use them as the published-by name.
• Add ability to hide posts from unregistered users.