Configuration and security

This documentation tracks Fahrtenbuch v0.3.24. Use the release-specific environment example as the source of truth.

Use strong, independent database, JWT and TOTP secrets; replace initial administrator credentials; enforce HTTPS; and restrict database and administrative service access.

For public passkey authentication, configure the public URL and WebAuthn relying-party hostname and origin consistently.

Sessions and token refresh

The v0.3.24 frontend centralizes access-token refresh across authenticated API modules. When an access token expires, it retries eligible requests with the newly refreshed token. Keep authentication secrets private, configure HTTPS correctly and monitor repeated unauthorized responses rather than assuming that all authentication failures are transient.

Background jobs

The deployment includes Redis-backed background processing. Administrators can inspect background job status and retry supported jobs; Photon reverse-geocoding tasks can be queued from administrator tools. Keep Redis and Redis Insight away from unrestricted public access.

Optional Swagger UI is controlled by SHOW_API_UI=true, exposing /api and /api/docs when enabled.