Jul 22 - Update - add audit viewer, CSRF lifetime

2026-07-22 16:59:46 -04:00
parent 8533cbe27c
commit a39fa091fa
8 changed files with 170 additions and 2 deletions
@@ -20,3 +20,5 @@ ADMIN_PASSWORD_HASH=
 SESSION_COOKIE_SECURE=1
 # Where the auth log fail2ban watches is written. Blank -> <appdir>/logs/auth.log
 AUTH_LOG_PATH=
+# CSRF token lifetime (seconds). Blank -> token lasts the whole session (no 1h expiry).
+WTF_CSRF_TIME_LIMIT=