Fix admin authorization and harden chat requests

2026-10-05 22:49:29 +02:00
parent e8cd13a0af
commit c48e1b17c4
38 changed files with 4897 additions and 1257 deletions
@@ -2,7 +2,8 @@ SESSION_SECRET=replace-with-a-long-random-secret
 # Optional: reachable from the Express server, never from the browser.
 # SEARXNG_URL=http://searxng:8080
 WEB_SEARCH_TIMEOUT_MS=8000
-UPLOAD_DIR=/app/data/uploads
+# Production containers can set UPLOAD_DIR=/app/data/uploads.
+# Locally, omitting UPLOAD_DIR uses data/uploads.
 UPLOAD_MAX_SIZE_MB=10
 UPLOAD_MAX_FILES=5
 UPLOAD_MAX_PIXELS=30000000