1 Commits (f97b0cc881916c4ba528960fa82aa2c12ffd3c8f)

Author	SHA1	Message	Date
Hong Phuc	f97b0cc881	feat: public demo mode + base-path proxy + security hardening ... - Add PUBLIC_DEMO_MODE guards on all mutating routes (/settings POST, /create POST, /background/add, /background/delete, /videos/delete) - Add PrefixMiddleware for PUBLIC_BASE_PATH support with 308 redirect - Add app_url() context processor for template link generation - Add client-side demo mode UI disabling (data-demo-disabled attribute) - Add PUBLIC_BASE_PATH + appPath() JS helpers in layout.html - Add redacted secrets in settings page (_redact_secrets with api_url/api_key) - Fix CSRF check for Vercel proxy (PUBLIC_ORIGIN_HOST env var support) - Bump Fly resources to 4GB RAM / 2 CPUs for FFmpeg+Playwright - Add fly.toml with PUBLIC_BASE_PATH, PUBLIC_DEMO_MODE, PUBLIC_ORIGIN_HOST	2 days ago