boban 9215a5b908 chore(release): v0.9.5 ... - Initial admin now uses the standard default password "clusev" (operator decision) with must_change_password forcing a new password on first login; banner/MOTD/README tell the operator to change it immediately. Idempotent no-op when an admin already exists. - Richer host MOTD (CLUSEV wordmark, version, live stack status, login + management hints). - README: install block now installs git (minimal Debian/Ubuntu lack it) and lists it as a prerequisite — found by a full fresh-VM install test (install + idempotent re-run verified). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-19 16:43:04 +02:00
..
Console/Commands	chore(release): v0.9.5	2026-06-19 16:43:04 +02:00
Events	fix(blade): garbled header on every signed-in page + private metrics channel (v0.4.1)	2026-06-14 08:34:07 +02:00
Http	feat(tls): external reverse-proxy mode core — no ACME + no forced HTTPS redirect (host check kept)	2026-06-14 22:31:04 +02:00
Jobs	feat: scaffold — Dockerized Laravel 13 + Livewire 3 + Tailwind 4 + Reverb	2026-06-12 00:31:50 +02:00
Livewire	feat(tls): dashboard "request certificate" button (trigger Caddy on-demand TLS)	2026-06-17 18:38:21 +02:00
Models	fix(security): harden brute-force, rate-limiting and auth-DoS (audit follow-up)	2026-06-17 17:59:45 +02:00
Notifications	fix(security): constant-time password-reset (flatten account-enumeration timing)	2026-06-15 19:16:30 +02:00
Providers	fix(security): harden brute-force, rate-limiting and auth-DoS (audit follow-up)	2026-06-17 17:59:45 +02:00
Services	feat(tls): dashboard "request certificate" button (trigger Caddy on-demand TLS)	2026-06-17 18:38:21 +02:00
Support	fix(security): harden brute-force, rate-limiting and auth-DoS (audit follow-up)	2026-06-17 17:59:45 +02:00