Admin login pasword changes

2026-08-24 13:26:41 +05:30
parent bbeb859d05
commit 2482fe43e3
5 changed files with 21 additions and 13 deletions
--- a/.env.production
+++ b/.env.production
@@ -53,7 +53,7 @@ AUTH_LOCKOUT_SECONDS=300
 # convenience: it skips the password check entirely, so any username signs in
 # and `admin` gets the admin pages. On a host published to the internet it means
 # anyone who finds mcp.nearle.ai.in signs in as admin by typing anything at all.
-AUTH_ALLOW_ANY_LOGIN=true
+AUTH_ALLOW_ANY_LOGIN=false

 # Machine consumers. Empty: MCP clients authenticate with a login token instead.
 API_KEYS=