Jens/geointel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: make guest access explicitly opt in
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
Details
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
Details
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
Details
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
Details

Browse Source
This commit is contained in:
Jens
2026-08-26 23:59:46 +02:00
parent 55c500ca7b
commit 464eb87bd0
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/unraid/README.md
+4 -4
View File
@@ -87,16 +87,16 @@ the backend remain available to trusted in-container operator scripts.
Production startup fails before replacing the active container when the Production startup fails before replacing the active container when the
password is empty or one of the documented defaults. password is empty or one of the documented defaults.
Guest access is enabled by default when the operator login gate is active: Guest access is disabled by default and must be explicitly enabled only for a dedicated demo instance:
```env ```env
GEOINTEL_GUEST_ACCESS_ENABLED=true GEOINTEL_GUEST_ACCESS_ENABLED=false
GEOINTEL_GUEST_DISPLAY_NAME=Gast GEOINTEL_GUEST_DISPLAY_NAME=Gast
GEOINTEL_GUEST_SESSION_TTL_SECONDS=7200 GEOINTEL_GUEST_SESSION_TTL_SECONDS=7200
``` ```
No extra guest setting is required for a new authenticated deployment. Set Set `GEOINTEL_GUEST_ACCESS_ENABLED=true` only on a dedicated demo deployment
`GEOINTEL_GUEST_ACCESS_ENABLED=false` to disable the button and guest endpoint. to enable the guest button and guest endpoint.
This adds **Als gast verkennen** to the landing page. The generated guest cookie This adds **Als gast verkennen** to the landing page. The generated guest cookie
is short-lived, project-scoped and limited to the canonical demo workflow. is short-lived, project-scoped and limited to the canonical demo workflow.
Operator mutations and access to another project are rejected by the backend, Operator mutations and access to another project are rejected by the backend,