feat(asr-pipeline): merge PR #1 webauth/CSRF/locking hardening and web_password fallback

2026-11-02 06:37:33 -08:00
parent 9debd1c47d
commit 3c70861463
44 changed files with 4354 additions and 333 deletions
@@ -35,6 +35,9 @@ HINDSIGHT_BANK=personal-context
 ASR_GIT_SYNC=0

 # Web & Notifications
+# ASR_WEB_PASSWORD is required. An empty value closes the browser UI.
+# ASR_WEB_ALLOW_ANON=1 opens it with no password; use only on a process that is not reachable.
+# ASR_WEB_COOKIE_SECURE=1 when the site is served over HTTPS.
 ASR_PUBLIC_URL=http://192.168.50.49:8788
 ASR_REVIEW_PUBLIC_HOST=192.168.50.145
 ASR_REVIEW_PORT=8788