Chat/memory/logs/models APIs were reachable without any auth even though the app is deployed publicly behind Caddy HTTPS; only the settings screen had a password. Add an optional SITE_PASSWORD-backed session cookie gate in front of everything (settings included, on top of its existing SETTINGS_PASSWORD), with a matching login screen on the frontend. Stays fully backward compatible: with SITE_PASSWORD unset the app behaves exactly as before. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
7 lines
434 B
Batchfile
7 lines
434 B
Batchfile
@echo off
|
|
rem SSLKEYLOGFILE がこのマシンのTLS監視プロキシの名前付きパイプを指していると
|
|
rem litellm(OpenSSLを直接ロード)が OPENSSL_Uplink エラーで起動時にクラッシュするため、
|
|
rem このコマンドの実行中だけ unset する(CLAUDE.md の「ローカル開発環境メモ」参照)。
|
|
set SSLKEYLOGFILE=
|
|
uv run --directory backend uvicorn app.main:app --reload --port 8000
|