17125387227b596d44b7a538e98975c76f49cb07
Shared-token auth was off on prod (no MAPPA_API_TOKEN) — anyone with network access could call /admin/purge_secrets and all mutations. Token generated, stored in pass mappa/full-env, wired into stack env + agent MCP configs (~/.claude.json). Redeployed via Portainer (stack 27). Verify: /inbox without token → 401, with token → 200.
meta(handoff): createPickingListPdf деплой 0.11.1 + смоук ✅ оба тенанта — wiki уроки (proxy-server ломает internal render, bookva-api:3000)
admin
Infrastructure agenda — VDS / NAS / recovery-host / OpenWRT + fault-tolerance roadmap.
See .wiki/overview.md for orientation.
Description
Languages
PowerShell
40.4%
JavaScript
36.4%
Shell
12.8%
Python
9.3%
Dockerfile
1.1%