secubox-deb/common
CyberMind-FR 055361e574 feat(core): secubox-user-sync — provisioning push of master users into apps (ref #410)
SecuBox stays source of truth. user_store gains set_password() (the single
password write path = capture point) + list_users(); a new host CLI
secubox-user-sync sets the canonical argon2 hash then pushes the same plaintext
(via SECUBOX_USER_PASSWORD env/stdin, never argv) into each app exposing a
`<app>ctl user-provision` verb. nextcloudctl + photoprismctl gain that verb,
each creating a per-user photo folder (/data/shared/photos/<user>) and a
user-scoped library; admin stays unrestricted (management), others scoped.
gk2 + admin are always provisioned (seed). Tests for set_password included.
2026-05-29 07:55:58 +02:00
..
apparmor Add secubox-repo and secubox-hardening modules, CI/CD workflows 2026-03-22 22:15:01 +01:00
audit Add secubox-repo and secubox-hardening modules, CI/CD workflows 2026-03-22 22:15:01 +01:00
nginx fix(metrics): Make sibling imports work under uvicorn (post-#98 hotfix) (#100) 2026-05-12 16:50:43 +02:00
secubox_core feat(core): secubox-user-sync — provisioning push of master users into apps (ref #410) 2026-05-29 07:55:58 +02:00