2 Commits

Include renames

Author	SHA1	Message	Date
nvrl	61af1a6dd2	Harden Python server: rate limits, login caps, upstream logout ... Take the client IP from the right-most X-Forwarded-For entry so a spoofed header no longer resets the per-IP limit. Cap resends per login, count them against the per-email limit, add a server-wide login mail limit and cap pending logins at 500. Count code attempts under the lock. Log the pl8list session out upstream once the feed has been read, also when reading fails or the account has no handle, and always drop it from memory.	2026-11-01 12:02:37 +01:00
nvrl	4a7f6903a3	Add pl8list infinite-scroll app with pl8list sign-in ... Endless TikTok-style feed over pl8list's Remix loaders. A guest crawler builds a shared catalogue; a per-user ranker learns from likes, full listens and skips. Users sign in with pl8list's email code; only a hash of the local session token is stored. Ships as a hardened Docker image with a Traefik override for pl8.narl.io.	2026-10-31 20:22:27 +01:00