Add outbound links to Caddy and nginx docs on Security page Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

cnighswonger committed Mar 28, 2026

Update docs for PR #84 auth layer and Codex agent feedback Fixes stale "no built-in auth" intro in Security-and-Networking, expands public/admin endpoint tier table, adds auth tier annotations throughout API-Reference, documents admin account creation in Getting-Started setup wizard, and adds auth tables, Login page, AuthContext, CORS, and OpenAPI hardening to Architecture. Ref cnighswonger/kanfei#78, cnighswonger/kanfei#84 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

cnighswonger committed Mar 28, 2026

Update docs for built-in session auth and cookie hardening Addresses staleness flagged by Codex agent on #78. Security-and-Networking now documents the two-tier API auth model (session + API key), cookie attributes (HttpOnly, SameSite=Lax, Secure on HTTPS), and adds session cookie verification to the post-TLS checklist. API-Reference adds auth endpoints. FAQ corrects the stale "no built-in auth" answer. Config-Reference adds CORS env var and secret masking notes. Ref cnighswonger/kanfei#78, cnighswonger/kanfei#83 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

cnighswonger committed Mar 28, 2026

Expand Security and Networking page with TLS guidance Adds concrete reverse proxy examples (Caddy and nginx) with TLS termination, WebSocket proxying for /ws/live, post-TLS checklist, HSTS recommendation, and localhost bind guidance. Updates secrets section with current bot token and API key names. Addresses the cleartext HTTP exposure documented in cnighswonger/kanfei#78. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

cnighswonger committed Mar 28, 2026

Kanfei Wiki Complete wiki for the Kanfei weather station platform. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

cnighswonger committed Mar 25, 2026