Commit graph

3 commits

Author SHA1 Message Date
Henrique Dias
1fb05d65de
docs,cmd: warn about broad scope for self-signup users (GHSA-6759-996p-gpj6)
When Signup is enabled with the default scope and createUserDir off, every
self-registered user inherits the served root and can read/modify/delete all
files. Add a startup WARNING for this configuration and document the risk and
the --createUserDir mitigation. No behavior or default change.
2026-06-27 08:18:18 +02:00
Henrique Dias
7b43cfb1dc
docs: improve fail2ban filter 2025-06-29 17:24:17 +02:00
Henrique Dias
d644744417
docs: add fail2ban instructions 2025-06-29 16:34:50 +02:00