code
a0ae58c29e
Upload/browse/delete UI for files under public/uploads/, covered by the existing /admin/* auth gate with no separate feature flag needed (no SQLite dependency to gate). Extension allowlist and max upload size are configurable; filenames are sanitized and de-duplicated on upload, and deletes re-verify the resolved path lands inside the upload directory before touching disk. Docker gains a fourth-turned-third named volume for public/uploads/ so uploads survive a rebuild. images/ (reserved scaffolding for a future image feature) is removed — nothing ever consumed it, and public/uploads/ now covers that use case. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
12 lines
212 B
Plaintext
12 lines
212 B
Plaintext
/public/cache/*
|
|
!/public/cache/.gitkeep
|
|
/novaconium/contact-log.txt
|
|
/data/*.sqlite
|
|
/data/*.sqlite-journal
|
|
/data/*.sqlite-wal
|
|
/data/*.sqlite-shm
|
|
.claude/
|
|
/graphify-out/
|
|
/public/uploads/*
|
|
!/public/uploads/.gitkeep
|