v1.0.8-beta.011 - feat: add password resets, proxy external covers, and simplify docker setup
This update introduces major quality-of-life improvements for container management, user authentication, and overall UI stability.
Authentication & Security:
- Added public Forgot Password flow with secure, time-limited email tokens.
- Added capability for Admins to trigger password reset emails for users.
- Password resets automatically revoke active sessions while preserving 2FA.
Email Templates Enhancement:
- Upgraded the default email templates (Pending Request, Request Approved, Comic Available) to include rich metadata.
- Emails now display the requester's name, request date, high-res cover image, and series synopsis.
ComicVine Hotlinking Fix:
- ComicVine recently enabled strict hotlinking protection, breaking external cover images across the Discover, Recommend, and Search pages.
- Upgraded the /api/library/cover endpoint to act as a secure proxy for external HTTP URLs, bypassing the hotlink block.
- Updated all relevant API routes to dynamically route external ComicVine images through the local proxy.
Docker & Environment Standardization:
- Standardized environment variables with the OMNIBUS_ prefix (OMNIBUS_CACHE_DIR, OMNIBUS_LOGS_DIR, OMNIBUS_BACKUPS_DIR, OMNIBUS_REDIS_URL).
- Explicitly surfaced the DATABASE_URL path in the Admin Settings UI.
- Migrated user avatars, banners, and custom trophies to save to the persistent /config/uploads/ volume, ensuring they survive container recreations.
- Updated docker-compose.yml and README.md to reflect the new, highly simplified two-volume (/config and /data) deployment structure.