josh 42da48864f Remove operator auth — trust the LAN ...

Can't log in from a fresh LXC deploy, and the service is LAN-only by
design. Rip out the whole bcrypt-password / signed-cookie session
layer: internal/auth, login templates, gen-admin-password binary +
Makefile targets, auth config block, login/logout routes and the
RequireSession middleware wrap. Agent bearer-token auth on
/api/v1/runs/{id}/* is untouched.

Operators who want a password can front the service with a reverse
proxy — noted in README and docs/operations.md.

2026-04-17 22:31:49 -04:00

..

agent_handlers_test.go

Initial commit: full Phases 1-6 implementation

2026-04-17 21:32:10 -04:00

agent_handlers.go

Initial commit: full Phases 1-6 implementation

2026-04-17 21:32:10 -04:00

smoke_test.go

Initial commit: full Phases 1-6 implementation

2026-04-17 21:32:10 -04:00

tile.go

Initial commit: full Phases 1-6 implementation

2026-04-17 21:32:10 -04:00

ui_handlers.go

Remove operator auth — trust the LAN

2026-04-17 22:31:49 -04:00