thepraandClaude Opus 5.5
cff75e3a47
Build / Build (push) Successful in 26s
Completion program R2 (docs/ROADMAP.md, 2026-10-17).
- An email address is set only with the password and a 6-digit code sent to it: /clientapi/user/email, /email/verify,
/email/remove and GET /clientapi/user/account (EmailVerification: an hour, five tries, the code's hash only;
EmailVerificationJob through the new IMailer). The request answers one sentence whether or not the address is free,
and nothing goes to an address another login verified. The old POST /clientapi/user/update, which changed the
address with neither and said when one was taken, answers 422.
- Recovery writes only to a verified address; migration _019 keeps the addresses given before verification existed.
- A changed password ends every session and every persona token, and answers a new JWT for the device that changed it.
- Sessions: every JWT carries its session's id ("si", kept by sniff/again). GET /clientapi/user/logout, which did
nothing, ends that session alone (RootUser.EndedSessions, until its tokens would expire); POST
/clientapi/user/logout/everywhere ends them all.
- AppConfiguration:HashingOptions was never bound, so passwords were hashed at the default 9789 iterations: it is
bound now, at 210,000, and a hash made at other iterations is made again at the next sign-in (matched on the old
hash, so two sign-ins never undo each other).
- Recovery and verification codes expire through TTL indexes; EmailVerification is never in a backup.
- AppConfigurationService reads appsettings as they are now, not the copy older builds saved in Mongo on first boot.
- ViewUserSettings and RootUserSettings carry SavedAt, so a client signing in keeps its own theme until one saved.
- Pasture: peers/mailpit.sh (Mailpit 1.31.4 as mailpit.test) receives PrivaPub's mail; recovery links open
https://decepub.test. scenarios/accounts.sh, in sweep batch A, checks all of the above (28 checks).
Verified: dotnet build PrivaPub.sln -c Release; the pasture with gts and mailpit: accounts 28/28 and gts, 91 passed,
0 failed.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WpVCoDeM1qUTRp4fXQdfof
214 lines
3.2 KiB
Caddyfile
214 lines
3.2 KiB
Caddyfile
{
|
|
local_certs
|
|
skip_install_trust
|
|
}
|
|
|
|
privapub.test {
|
|
tls internal
|
|
reverse_proxy pasture-privapub:80
|
|
}
|
|
|
|
gts.test {
|
|
tls internal
|
|
reverse_proxy pasture-gts:80
|
|
}
|
|
|
|
mastodon.test {
|
|
tls internal
|
|
reverse_proxy pasture-mastodon:3000
|
|
}
|
|
|
|
misskey.test {
|
|
tls internal
|
|
reverse_proxy pasture-misskey:3000
|
|
}
|
|
|
|
sharkey.test {
|
|
tls internal
|
|
reverse_proxy pasture-sharkey:3000
|
|
}
|
|
|
|
lemmy.test {
|
|
tls internal
|
|
reverse_proxy pasture-lemmy:8536
|
|
}
|
|
|
|
akkoma.test {
|
|
tls internal
|
|
reverse_proxy pasture-akkoma:4000
|
|
}
|
|
|
|
decepub.test {
|
|
tls internal
|
|
reverse_proxy pasture-decepub:80
|
|
}
|
|
|
|
mailpit.test {
|
|
tls internal
|
|
reverse_proxy pasture-mailpit:8025
|
|
}
|
|
|
|
hollo.test {
|
|
tls internal
|
|
reverse_proxy pasture-hollo:3000
|
|
}
|
|
|
|
iceshrimp.test {
|
|
tls internal
|
|
reverse_proxy pasture-iceshrimp:3000
|
|
}
|
|
|
|
pleroma.test {
|
|
tls internal
|
|
reverse_proxy pasture-pleroma:4000
|
|
}
|
|
|
|
peertube.test {
|
|
tls internal
|
|
reverse_proxy pasture-peertube:9000
|
|
}
|
|
|
|
pixelfed.test {
|
|
tls internal
|
|
reverse_proxy pasture-pixelfed:8080
|
|
}
|
|
|
|
wordpress.test {
|
|
tls internal
|
|
reverse_proxy pasture-wordpress:80
|
|
}
|
|
|
|
friendica.test {
|
|
tls internal
|
|
reverse_proxy pasture-friendica:80
|
|
}
|
|
|
|
mobilizon.test {
|
|
tls internal
|
|
reverse_proxy pasture-mobilizon:4000
|
|
}
|
|
|
|
gancio.test {
|
|
tls internal
|
|
reverse_proxy pasture-gancio:13120
|
|
}
|
|
|
|
funkwhale.test {
|
|
tls internal
|
|
reverse_proxy pasture-funkwhale:80
|
|
}
|
|
|
|
piefed.test {
|
|
tls internal
|
|
reverse_proxy pasture-piefed:5000
|
|
}
|
|
|
|
mbin.test {
|
|
tls internal
|
|
reverse_proxy pasture-mbin:80
|
|
}
|
|
|
|
nodebb.test {
|
|
tls internal
|
|
reverse_proxy pasture-nodebb:4567
|
|
}
|
|
|
|
castopod.test {
|
|
tls internal
|
|
reverse_proxy pasture-castopod:8080
|
|
}
|
|
|
|
ktistec.test {
|
|
tls internal
|
|
reverse_proxy pasture-ktistec:3000
|
|
}
|
|
|
|
forte.test {
|
|
tls internal
|
|
reverse_proxy pasture-forte:8080
|
|
}
|
|
|
|
hubzilla.test {
|
|
tls internal
|
|
reverse_proxy pasture-hubzilla:8080
|
|
}
|
|
|
|
vernissage.test {
|
|
tls internal
|
|
reverse_proxy pasture-vernissage:8080
|
|
}
|
|
|
|
bookwyrm.test {
|
|
tls internal
|
|
reverse_proxy pasture-bookwyrm:8000
|
|
}
|
|
|
|
ghost.test {
|
|
tls internal
|
|
handle /.ghost/activitypub/* {
|
|
reverse_proxy pasture-ghost-ap:8080
|
|
}
|
|
handle /.well-known/webfinger {
|
|
reverse_proxy pasture-ghost-ap:8080
|
|
}
|
|
handle /.well-known/nodeinfo {
|
|
reverse_proxy pasture-ghost-ap:8080
|
|
}
|
|
handle {
|
|
reverse_proxy pasture-ghost:2368
|
|
}
|
|
}
|
|
|
|
owncast.test {
|
|
tls internal
|
|
reverse_proxy pasture-owncast:8080
|
|
}
|
|
|
|
writefreely.test {
|
|
tls internal
|
|
reverse_proxy pasture-writefreely:8080
|
|
}
|
|
|
|
snac.test {
|
|
tls internal
|
|
reverse_proxy pasture-snac:8001
|
|
}
|
|
|
|
mitra.test {
|
|
tls internal
|
|
reverse_proxy pasture-mitra:8383
|
|
}
|
|
|
|
aoderelay.test {
|
|
tls internal
|
|
reverse_proxy pasture-aoderelay:8080
|
|
}
|
|
|
|
relay.test {
|
|
tls internal
|
|
reverse_proxy pasture-relay-server:8080
|
|
}
|
|
|
|
smithereen.test {
|
|
tls internal
|
|
handle /i/* {
|
|
reverse_proxy pasture-smithereen-imgproxy:8080
|
|
}
|
|
handle_path /s/* {
|
|
reverse_proxy pasture-smithereen-files:80
|
|
}
|
|
handle {
|
|
reverse_proxy pasture-smithereen:4567
|
|
}
|
|
}
|
|
|
|
lemmy19.test {
|
|
tls internal
|
|
reverse_proxy pasture-lemmy19:8536
|
|
}
|
|
|
|
flood1.test, flood2.test, flood3.test, flood4.test, flood5.test, flood6.test, flood7.test, flood8.test, flood9.test, flood10.test, flood11.test, flood12.test, flood13.test, flood14.test, flood15.test, flood16.test, flood17.test, flood18.test, flood19.test, flood20.test {
|
|
tls internal
|
|
reverse_proxy pasture-flood:8080
|
|
}
|