- Cont demo (demo@example.com/demo1234) activ implicit, identificat prin
settings.demo_email — fără configurare în env; DEMO_EMAIL="" îl dezactivează
- Contul demo nu poate fi modificat prin API (email/parolă/status blocate 403)
- reset_demo.py: șterge idempotent toate datele demo și recrează proprietatea
demo cu 3 spații și 5 rezervări exemplu cu date relative la ziua curentă
- entrypoint.sh: reset la boot + buclă la 3h (DEMO_RESET_INTERVAL)
- start.sh (dev): reset la fiecare pornire
- Login.vue: hint cu credențialele demo (click = precompletare) și mesajul
de resetare la 3 ore
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- auth: first registered user becomes superadmin (active immediately)
- entrypoint: no longer seeds demo data in prod (opt-in via RUN_SEED=1)
- config: refuse to boot in prod with weak/placeholder SECRET_KEY (<32 chars)
- main: restrict CORS to FRONTEND_URL only in prod (localhost dev-only)
- seed_db: block prod seeding, read passwords from env, stop printing them
- login: remove demo account credentials from UI
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
exec ./entrypoint.sh: no such file or directory was caused by
Windows-style line endings making the shebang unresolvable.
Also add .gitattributes to enforce LF for shell scripts.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
