Files
AvianVisitors/avian/forwarding/caddy-auth.caddy
T
Twarner491 d3241f92cf Pre-share fixes from final review pass
Blockers
- http://birdnet.local/avian/ now serves the collage (added avian/index.html
  redirect to frontend/; previously the symlink target had no top-level
  index, so users saw a directory listing of api/ assets/ forwarding/
  frontend/ scripts/).
- Gemini model bumped from gemini-2.5-flash-image-preview (deprecated
  2026-01-15) to the stable gemini-2.5-flash-image. Pregen was non-
  functional out of the box.
- avian-mqtt.service: dropped %h (which expands to /root for system-mode
  units regardless of User=). Use WorkingDirectory=~ which DOES respect
  User=, plus a relative ExecStart.
- birdnet-api.php case 'lifelist' now aliases COUNT(*) AS n (was 'total'),
  matching what apt.js reads for atlas card counts. Atlas previously
  always displayed 0.

Bugs
- Retry-After parsing handles HTTP-date format without crashing.
- apt.js no longer fetches firstseen/timeseries (declared in state but
  never consumed). Two wasted round-trips per page load removed.
- update_birdnet.sh defaults branch=avian-visitors so the (opt-in)
  Sunday auto-update cron doesn't reset HEAD to upstream main and
  delete the avian/ overlay.
- recording.php: removed dead $BIRDS_JSON_CANDIDATES.

Polish
- Pregen --sleep default raised 4→6s (more headroom under free-tier RPM).
- en-dash in README BOM (~$35–80) replaced with hyphen for style match.
- Slop sweep across user-facing docs: no em-dashes, no en-dashes, no
  AI-slop word hits (robust/comprehensive/seamless/etc.).
2026-05-28 11:11:20 -07:00

20 lines
600 B
Plaintext

# Optional Basic-auth gate for the collage.
# Use only if you're NOT putting Cloudflare Access in front of the
# public URL. Replace the bcrypt hash below - generate via:
# caddy hash-password --plaintext 'your-pass'
#
# Drop this into /etc/caddy/conf.d/ alongside avian.caddy and reload.
(avian_basicauth) {
basic_auth {
# username bcrypt-hash
avian $2a$14$REPLACE_WITH_HASH_FROM_caddy_hash-password
}
}
# Example: gate only the public hostname, leave LAN open.
# https://birds.your-domain.com {
# import avian_basicauth
# reverse_proxy localhost:80
# }