feat(security): добавить юзера kopylov в basic_auth gate #433

Merged

lekss361 merged 1 commit from feat/add-user-kopylov into main

2026-05-23 09:07:51 +00:00

lekss361 commented

2026-05-23 09:02:56 +00:00

Owner

Цель

Добавить юзера kopylov в basic_auth gate (PR #426).

Changes

caddy/users.caddy.snippet — +1 entry с bcrypt hash (cost=14, base64-encoded).

Verify

caddy validate прошёл локально → Valid configuration.

After merge

deploy.yml auto-reload Caddy (up -d --force-recreate caddy уже в pipeline). Доступ работает сразу.

Plain password передан main session через защищённый канал (vault meta/00_credentials.md + .tmp/initial_passwords.txt).

## Цель Добавить юзера `kopylov` в basic_auth gate ([PR #426](https://git.gendsgn.ru/lekss361/gendesign/pulls/426)). ## Changes `caddy/users.caddy.snippet` — +1 entry с bcrypt hash (cost=14, base64-encoded). ## Verify `caddy validate` прошёл локально → `Valid configuration`. ## After merge `deploy.yml` auto-reload Caddy (`up -d --force-recreate caddy` уже в pipeline). Доступ работает сразу. Plain password передан main session через защищённый канал (vault `meta/00_credentials.md` + `.tmp/initial_passwords.txt`).

lekss361 added 1 commit 2026-05-23 09:02:57 +00:00

feat(security): добавить юзера kopylov в basic_auth gate d4991ae52e

lekss361 merged commit de1652a6d8 into main

2026-05-23 09:07:51 +00:00

lekss361 referenced this pull request from a commit

2026-05-23 09:07:51 +00:00

feat(security): добавить юзера kopylov в basic_auth gate (#433)

lekss361 commented

2026-05-23 09:08:07 +00:00

Author

Owner

Merged via deep-code-reviewer — verdict APPROVE.

Validation:

Hash format: base64-encoded bcrypt $2a$14$..., Caddy 2.11+ compatible, cost=14 matches user1-user10
Username: kopylov (7 chars, [a-z]+), no duplicate
Snippet syntax: entry inside basic_auth bcrypt "GenDesign Pilot" { ... } block, indent consistent (4 spaces)
No plain password leak in diff (только base64 hash + RU comment)
No conflict with PR #432 (different files)

После deploy.yml run: curl -u kopylov:<pass> https://gendsgn.ru/ → ожидается 200.

Merged via deep-code-reviewer — verdict APPROVE. **Validation:** - Hash format: base64-encoded bcrypt `$2a$14$...`, Caddy 2.11+ compatible, cost=14 matches user1-user10 - Username: `kopylov` (7 chars, `[a-z]+`), no duplicate - Snippet syntax: entry inside `basic_auth bcrypt "GenDesign Pilot" { ... }` block, indent consistent (4 spaces) - No plain password leak in diff (только base64 hash + RU comment) - No conflict with PR #432 (different files) После deploy.yml run: `curl -u kopylov:<pass> https://gendsgn.ru/` → ожидается 200.

lekss361 referenced this pull request from a commit

2026-05-23 09:18:13 +00:00

fix(security): caddy/** в deploy paths + username из 401 попытки

lekss361 referenced this pull request

2026-05-23 09:19:03 +00:00

fix(security): caddy/** в deploy paths + username из 401 попытки #434

lekss361 referenced this pull request

2026-05-23 09:26:16 +00:00

fix(security): caddy/** в deploy paths + username из 401 попытки #434

lekss361 referenced this pull request

2026-05-23 09:52:41 +00:00

fix(security): log_credentials + auth_audit.log → username из 401 #436