mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-30 00:19:30 +00:00
SecuBox stays source of truth. user_store gains set_password() (the single password write path = capture point) + list_users(); a new host CLI secubox-user-sync sets the canonical argon2 hash then pushes the same plaintext (via SECUBOX_USER_PASSWORD env/stdin, never argv) into each app exposing a `<app>ctl user-provision` verb. nextcloudctl + photoprismctl gain that verb, each creating a per-user photo folder (/data/shared/photos/<user>) and a user-scoped library; admin stays unrestricted (management), others scoped. gk2 + admin are always provisioned (seed). Tests for set_password included. |
||
|---|---|---|
| .. | ||
| apparmor | ||
| audit | ||
| nginx | ||
| secubox_core | ||