- pull: server → local
- push: local → server
- watch: auto-push on file changes via fswatch
- status: dry-run diff
- dev.sh: ./dev.sh --sync pulls before starting
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- API client sends _environment param on all content/asset requests
- GET /api/environments endpoint to list configured environments
- EnvironmentSwitcher in Sidebar with i18n label "Space"
- clearSession() also clears environment from sessionStorage
- .env.example documents ADMIN_USERNAME/PASSWORD/SESSION_SECRET
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
EnvironmentContext holds current env as React state. On change,
QueryInvalidatorOnEnvChange calls queryClient.invalidateQueries() so
all content/list pages refetch immediately without manual reload.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Next.js prepends basePath to matcher patterns, so patterns must not
include /admin prefix. Logout button now always visible in sidebar.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- iron-session for encrypted httpOnly session cookies
- POST /api/auth/login: verifies ADMIN_USERNAME/ADMIN_PASSWORD, sets session, returns API key
- POST /api/auth/logout: destroys session
- middleware.ts: protects all routes, redirects to /login if unauthenticated
- Login page: username + password form (no more browser popup)
- Sidebar: logout calls API route and clears session
- docker-compose.prod.yml: admin-ui reads /opt/rustycms/.env.admin
- deploy.yml: generates .env.admin from Gitea secrets
- Caddy: basic_auth removed from /admin* block
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Add basePath /admin to Next.js config for path-based routing
- Add .gitea/workflows/deploy.yml for CI/CD via Gitea Actions
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
