Add OTP_REQUIRED switch for email OTP login

2026-09-14 15:03:16 +07:00
parent 2f290ddb26
commit 9afcf072b0
11 changed files with 133 additions and 9 deletions
@@ -13,5 +13,10 @@ EMIT_SECRET=
 SMTP_USERNAME=
 SMTP_PASSWORD=

+# Email OTP on sign-in. Leave true; only the exact value "false" makes sign-in
+# password only (logged as OTP_BYPASSED, shown on the login page and top bar).
+# Applied to app/config.php by the php container on every start.
+OTP_REQUIRED=true
+
 # Port to expose the web app on (default 80)
 HTTP_PORT=80