paul
0d33f21ee6
BREAKING CHANGE: Admin password is now auto-generated on first setup Security improvements: - Remove hardcoded 'admin123' password completely - Generate secure random password on first installation - Save credentials to ADMIN_CREDENTIALS.txt (git-ignored) - Force password change on first login - Implement strong password requirements (12+ chars, mixed case, numbers, special) - Add password strength validation - Increase bcrypt rounds from 10 to 12 New features: - Password generator utility with secure random generation - Human-readable password format (e.g., SwiftEagle3847\!) - Password reset script for existing installations - Comprehensive admin setup documentation - Must-change-password flag in database Migration guide: - New installations: Check ADMIN_CREDENTIALS.txt for generated password - Existing installations: Run scripts/reset-admin-password.js - All users must change password on first login after update This fixes a critical vulnerability where all installations used the same default admin password, allowing unauthorized access. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
33 lines
788 B
Markdown
33 lines
788 B
Markdown
# Photo Sharing Platform
|
|
|
|
A secure, self-hosted photo sharing platform designed for weddings and events. Features automatic expiration, email notifications, and simple file-based management.
|
|
|
|
## Features
|
|
|
|
- 🔒 Password Protected Galleries
|
|
- ⏰ Automatic Expiration
|
|
- 📧 Email Notifications
|
|
- 📁 Simple File Management
|
|
- 📊 Analytics Integration
|
|
- 🎨 Customizable Themes
|
|
- 📱 Mobile Responsive
|
|
- ⚡ Docker Ready
|
|
|
|
## Quick Start
|
|
|
|
1. Clone the repository
|
|
2. Run `./scripts/install.sh`
|
|
3. Configure `.env` file
|
|
4. Setup SSL: `./scripts/setup-ssl.sh`
|
|
5. Start: `docker-compose -f docker-compose.prod.yml up -d`
|
|
|
|
Default credentials: Check ADMIN_CREDENTIALS.txt after first setup
|
|
|
|
## Documentation
|
|
|
|
See DEPLOYMENT.md for detailed deployment instructions.
|
|
|
|
## License
|
|
|
|
MIT License
|