phil/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Close Karakeep signups and turn on unattended security updates

Browse Source 
Karakeep had DISABLE_SIGNUPS unset, so anyone could make an account on
bookmarks. and use the OpenAI key behind it. The server also had no
automatic updates and three security updates waiting; the common role now
installs unattended-upgrades with Debian's default security-only origins.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Phil
2026-10-31 11:47:45 -06:00
co-authored by Claude Opus 5.5
parent 0c14ee5b1d
commit a08402f0ac
4 changed files with 22 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/docker/templates/hoarder-env.j2
+3 -1
View File
@@ -7,4 +7,6 @@ OAUTH_CLIENT_SECRET={{ vault_hoarder.pocketid.client_secret }}
OAUTH_CLIENT_ID={{ vault_hoarder.pocketid.client_id }}
OAUTH_PROVIDER_NAME=Pocket ID
OAUTH_WELLKNOWN_URL=https://{{ subdomains.pocketid }}/.well-known/openid-configuration
OAUTH_ALLOW_DANGEROUS_EMAIL_ACCOUNT_LINKING=false
OAUTH_ALLOW_DANGEROUS_EMAIL_ACCOUNT_LINKING=false
# Karakeep allows open signups unless this is set. Unset it briefly to add a user.
DISABLE_SIGNUPS=true