security: make Unraid guest access explicitly opt in

This commit is contained in:
2026-08-26 22:17:34 +02:00
parent ca8b87f1c4
commit fc9cf5581c
+6 -6
View File
@@ -46,12 +46,12 @@ GEOINTEL_AUTH_PASSWORD_HASH=
GEOINTEL_AUTH_SESSION_SECRET=
GEOINTEL_AUTH_SESSION_TTL_SECONDS=43200
# Guest access is enabled by default whenever operator authentication is active.
# It opens the seeded GeoIntel demo in a temporary, API-enforced restricted
# session. Set this to false on installations containing private project data.
# LET OP: scripts/configure_operator_login.sh zet dit op false tenzij je
# expliciet --guest-access true meegeeft.
GEOINTEL_GUEST_ACCESS_ENABLED=true
# Guest access is demo-only and disabled by default. Enable it only on a
# dedicated demo instance with a separate database/storage root and no private,
# customer or operational data. It is not tenant isolation.
# scripts/configure_operator_login.sh keeps it disabled unless
# --guest-access true is supplied explicitly.
GEOINTEL_GUEST_ACCESS_ENABLED=false
GEOINTEL_GUEST_DISPLAY_NAME=Gast
GEOINTEL_GUEST_SESSION_TTL_SECONDS=7200