3 Commits

Author	SHA1	Message	Date
Anso	f317a83814	fix(security): harden encryption key permissions, increase password minimum, remove sensitive logs (#323) ... Self-heal encryption key file permissions to 0600 on startup. Increase minimum password length from 6 to 8 characters per NIST SP 800-63B. Remove console.log statements that exposed file paths, .env locations, stack names, and admin usernames to stdout.	2026-04-01 21:27:37 -04:00
Anso	8380fbad4b	feat(rbac): add Deployer & Node Admin roles with scoped permissions (Team Pro) (#253) ... * feat(rbac): add Deployer & Node Admin roles with scoped permissions (Team Pro) Add intermediate RBAC roles gated to Team Pro tier: - Deployer: can deploy/restart/stop/start stacks but cannot edit compose files, delete stacks, or access system settings - Node Admin: full stack and node management within scope, no system settings access - Scoped permissions: assign roles per-stack or per-node for fine-grained access control - Permission engine with checkPermission/requirePermission guards replacing requireAdmin on stack/node routes - Frontend can() function with /api/permissions/me endpoint for client-side permission checks - User management UI updated with 4-role selector and scoped permission editor - Documentation updated with permission matrix, scoped permission docs, and screenshots * fix(rbac): remove unused RoleAssignment import to fix lint error	2026-03-29 17:02:56 -04:00
Anso	ffabfd1c39	docs: audit and refresh documentation with updated screenshots (#197) ... Update 11 doc pages with accurate content and capture 14 fresh screenshots. Remove JWT_SECRET from configuration (auto-generated), fix editor container actions, add missing Settings sections, update Features Overview, and add remote alerts documentation.	2026-03-27 18:08:31 -04:00