Add secure administrator operations console

Provide TOTP-authenticated, role-controlled user and credit workflows with paginated audit data and SQL-backed statistics so operations can manage growth safely.
2026-08-17 15:20:34 +08:00
parent 676bfd2451
commit 1a9c518f96
76 changed files with 14602 additions and 3 deletions
@@ -30,6 +30,15 @@ app:
  antiAbuse:
    identityHmacKeyBase64: "$IDENTITY_HMAC_KEY"
    tombstoneRetentionDays: "$IDENTITY_TOMBSTONE_RETENTION_DAYS:365"
+  admin:
+    enabled: "$ADMIN_ENABLED:false"
+    bootstrapEnabled: "$ADMIN_BOOTSTRAP_ENABLED:false"
+    bootstrapOperatorId: "$ADMIN_BOOTSTRAP_OPERATOR_ID:"
+    bootstrapUsername: "$ADMIN_BOOTSTRAP_USERNAME:"
+    bootstrapPasswordHash: "$ADMIN_BOOTSTRAP_PASSWORD_HASH:"
+    bootstrapTotpSecretBase32: "$ADMIN_BOOTSTRAP_TOTP_SECRET_BASE32:"
+    sessionHours: "$ADMIN_SESSION_HOURS:8"
+    maximumManualGrant: "$ADMIN_MAXIMUM_MANUAL_GRANT:100000"
  apple:
    teamId: "$APPLE_TEAM_ID:"
    keyId: "$APPLE_KEY_ID:"