verstak
/
verstak-sync-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

docs(web): document console diagnostics and smoke

This commit is contained in:
mirivlad 2026-07-17 06:03:49 +08:00
parent 50d0d7df38
commit 513675c852
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
README.md
View File

@ -245,6 +245,11 @@ values are `ru`, `en`, or `system`; `system` uses `Accept-Language`, then
Registration is controlled by `web.allow_registration`; when disabled the Registration is controlled by `web.allow_registration`; when disabled the
public registration page does not expose account creation. public registration page does not expose account creation.
The admin console also provides bounded user/device/audit lists, a vault detail
view with aggregates only (never file payloads), safe retention cleanup, and a
sanitized diagnostics download. General web settings are stored in the existing
`config.yml`; SMTP passwords are not returned to a browser form.
All browser mutations use POST and validate a server-side session plus CSRF All browser mutations use POST and validate a server-side session plus CSRF
token. The server returns security headers including a restrictive CSP, token. The server returns security headers including a restrictive CSP,
`frame-ancestors 'none'`, `nosniff`, and a same-origin referrer policy. The `frame-ancestors 'none'`, `nosniff`, and a same-origin referrer policy. The
@ -335,6 +340,9 @@ new clients.
# Run tests # Run tests
go test ./... go test ./...
# Run real headless Chromium smoke screenshots in a temporary directory
./scripts/smoke-web.sh
# Build for production # Build for production
CGO_ENABLED=1 go build -o verstak-sync-server ./cmd/server CGO_ENABLED=1 go build -o verstak-sync-server ./cmd/server
``` ```