feat(cloud-console): add user authentication and administration

2026-07-13 17:54:53 +08:00
parent 035b177128
commit cdef630e67
35 changed files with 4126 additions and 113 deletions
@@ -15,6 +15,15 @@ CLOUD_SCHEDULER_INTERVAL_SECONDS=1
 CLOUD_LEASE_REAPER_INTERVAL_SECONDS=5
 CLOUD_LEASE_DURATION_SECONDS=60
 CLOUD_MAX_TASK_ATTEMPTS=3
+# Browser user sessions are secure-by-default in production. Terminate TLS at a
+# reverse proxy before exposing the Console; do not put initial-user passwords here.
+CLOUD_USER_SESSION_IDLE_SECONDS=28800
+CLOUD_USER_SESSION_ABSOLUTE_SECONDS=604800
+CLOUD_LOGIN_FAILURE_LIMIT=5
+CLOUD_LOGIN_FAILURE_WINDOW_SECONDS=900
+CLOUD_LOGIN_BLOCK_SECONDS=900
+CLOUD_SESSION_COOKIE_SECURE=true
+CLOUD_TRUST_PROXY_HEADERS=false

 HOST_AGENT_HOST_ID=host-local
 HOST_AGENT_TOKEN=change-me-host-token