0 Fork 0

T

iamdoubz 13733ac262 auth: sessions, login/logout/me/change-password, CSRF, guards, audit

argon2id passwords with a min length and a common-password list (SecLists,
MIT). Login failures are limited per IP and per email; must_change_password
blocks everything outside /api/auth/*. The first admin is created from env
on startup. pnpm dev derives DATABASE_URL from .env.

Task: M1-T3

2026-10-17 15:08:44 -05:00

.github/workflows

db: drizzle schema matching spec 02, initial migrations, settings service

2026-10-17 15:04:18 -05:00

apps

auth: sessions, login/logout/me/change-password, CSRF, guards, audit

2026-10-17 15:08:44 -05:00

asterisk

asterisk: 24.0.0-rc2 image built from source with static config

2026-10-17 14:31:05 -05:00

deploy

deploy: docker compose stack, api image, install script, proxy configs

2026-10-17 14:32:57 -05:00

docs

db: drizzle schema matching spec 02, initial migrations, settings service

2026-10-17 15:04:18 -05:00

packages/shared

auth: sessions, login/logout/me/change-password, CSRF, guards, audit

2026-10-17 15:08:44 -05:00

scripts

deploy: docker compose stack, api image, install script, proxy configs

2026-10-17 14:32:57 -05:00

.dockerignore

deploy: docker compose stack, api image, install script, proxy configs

2026-10-17 14:32:57 -05:00

.env.example

deploy: docker compose stack, api image, install script, proxy configs

2026-10-17 14:32:57 -05:00

.gitattributes

workspace: pnpm monorepo with api, web, shared

2026-10-17 14:18:02 -05:00

.gitignore

workspace: ignore .pnpm-store (CI runners put it in the checkout)

2026-10-17 14:42:34 -05:00

.prettierignore

db: drizzle schema matching spec 02, initial migrations, settings service

2026-10-17 15:04:18 -05:00

.prettierrc.json

workspace: pnpm monorepo with api, web, shared

2026-10-17 14:18:02 -05:00

AGENTS.md

docs: initial SelfPhoneNG spec

2026-10-17 14:11:09 -05:00

CLAUDE.md

docs: initial SelfPhoneNG spec

2026-10-17 14:11:09 -05:00

docker-compose.yml

deploy: docker compose stack, api image, install script, proxy configs

2026-10-17 14:32:57 -05:00

eslint.config.js

workspace: ignore .pnpm-store (CI runners put it in the checkout)

2026-10-17 14:42:34 -05:00

LICENSE

workspace: pnpm monorepo with api, web, shared

2026-10-17 14:18:02 -05:00

package.json

workspace: pnpm monorepo with api, web, shared

2026-10-17 14:18:02 -05:00

pnpm-lock.yaml

auth: sessions, login/logout/me/change-password, CSRF, guards, audit

2026-10-17 15:08:44 -05:00

pnpm-workspace.yaml

db: drizzle schema matching spec 02, initial migrations, settings service

2026-10-17 15:04:18 -05:00

README.md

docs: initial SelfPhoneNG spec

2026-10-17 14:11:09 -05:00

tsconfig.base.json

web: vite + react + tailwind hello page with dark-mode toggle

2026-10-17 14:23:15 -05:00

vitest.config.ts

db: drizzle schema matching spec 02, initial migrations, settings service

2026-10-17 15:04:18 -05:00

README.md

SelfPhoneNG

A fully open source, self-hosted business phone system: extensions, desk phones and a browser softphone, voicemail to email, IVRs, ring groups, queues, office hours, call recording, live dashboard, SMS and phone provisioning. Bring your own SIP trunk and numbers (reference provider: voip.ms). Built on Asterisk 24 LTS + TypeScript + PostgreSQL 18.

Status: specification stage. Nothing is built yet.

Start here if you are writing code (human or AI): AGENTS.md
The full spec: docs/spec/
Build order: docs/spec/09-roadmap.md

License: AGPL-3.0-or-later.