1 Commits (157b06e9be208783f2db66b0071e9fa2d56f934c)

Author	SHA1	Message	Date
Hong Phuc	f97b0cc881	feat: public demo mode + base-path proxy + security hardening ... - Add PUBLIC_DEMO_MODE guards on all mutating routes (/settings POST, /create POST, /background/add, /background/delete, /videos/delete) - Add PrefixMiddleware for PUBLIC_BASE_PATH support with 308 redirect - Add app_url() context processor for template link generation - Add client-side demo mode UI disabling (data-demo-disabled attribute) - Add PUBLIC_BASE_PATH + appPath() JS helpers in layout.html - Add redacted secrets in settings page (_redact_secrets with api_url/api_key) - Fix CSRF check for Vercel proxy (PUBLIC_ORIGIN_HOST env var support) - Bump Fly resources to 4GB RAM / 2 CPUs for FFmpeg+Playwright - Add fly.toml with PUBLIC_BASE_PATH, PUBLIC_DEMO_MODE, PUBLIC_ORIGIN_HOST	2 days ago