GitLab

refac: settings

Update .gitignore

fix: documents tags

chore: styling fix

feat: export all chats from db

admin only

feat: include only last images

chore: version update

Improve Session Security

feat: document collection

fix: timestamp display

Disable Chroma telemetry

This way the random secret is created on first run instead of docker build. We don't really want all standard imaages to share a password anymore than we want a static password.

Even though "User.email" is enforced as unique at signup, it is not a unique field in the database. Let's use "User.id" instead. This also makes it more difficult to do a session stealing attack.

Default docker installations should generate a random key instead of using a static secret that everyone can see.

Start by renaming variables to something more generic. This will give us a bit more flexibility as we look to other session management mechanisms.