11 Commits

Author	SHA1	Message	Date
lashman	320e724ac8	switch all cookies from sameSite strict to lax for proxy compatibility	2026-03-21 23:37:04 +02:00
lashman	cdb9e5d8ee	branding image uploads for favicon, logo, og image plus server-side og injection	2026-03-21 23:25:16 +02:00
lashman	57fa421f1f	fetch admin avatar from admin endpoint instead of anonymous user	2026-03-21 22:34:12 +02:00
lashman	aba03b67b0	fix avatar serving using readFile instead of stream	2026-03-21 22:27:38 +02:00
lashman	97f66b9748	fix admin avatar upload using linked user instead of anonymous cookie	2026-03-21 22:14:11 +02:00
lashman	07c1cf9940	allow same-origin requests without explicit origin header	2026-03-21 22:08:59 +02:00
lashman	f09aa64f36	fix static file serving path for docker deployment	2026-03-21 21:45:51 +02:00
lashman	1566f85cc9	browser-based admin setup on first visit, no CLI needed	2026-03-21 19:34:51 +02:00
lashman	d52088a88b	dynamic plugin system, toast notifications, board delete, gitea-sync plugin rewrite, granular locking fixes	2026-03-21 19:26:35 +02:00
lashman	5ba25fb956	security hardening, team invites, granular locking, view counts, board subscriptions, scheduled changelog, mentions, recovery codes, accessibility and hover states	2026-03-21 17:37:01 +02:00
lashman	f07eddf29e	initial project setup ... Fastify + Prisma backend, React + Vite frontend, Docker deployment. Multi-board feedback platform with anonymous cookie auth, passkey upgrade path, ALTCHA spam protection, plugin system, and full privacy-first architecture.	2026-03-19 18:05:16 +02:00