System info page for the administrator #28

New issue

Closed

opened 2026-10-15 01:05:03 -04:00 by vmanne-poc · 0 comments

vmanne-poc commented

2026-10-15 01:05:03 -04:00

Owner

Goal: let the administrator see how this server is set up without reading environment variables or logs.

Plan

GET /system/info, administrator only (RootGuard). It returns:
- Postak version and Node version
- database: reachable, applied migrations, pending migrations
- whether self-registration is on
- whether system mail is configured, which enables password reset (show the from address only)
- whether SES bounce notifications are on (number of allowed topics)
- whether the scheduler is on
- PUBLIC_URL and POSTAK_APP_URL
Never return secrets: no SMTP credentials, JWT secret, or full connection strings. Tests check this.
System info page linked from the sidebar for the administrator. Settings that are off include a short hint on how to turn them on.

Done when

e2e tests cover root-only access and the no-secrets rule.
A component test covers the page.

**Goal:** let the administrator see how this server is set up without reading environment variables or logs. **Plan** - `GET /system/info`, administrator only (`RootGuard`). It returns: - Postak version and Node version - database: reachable, applied migrations, pending migrations - whether self-registration is on - whether system mail is configured, which enables password reset (show the from address only) - whether SES bounce notifications are on (number of allowed topics) - whether the scheduler is on - `PUBLIC_URL` and `POSTAK_APP_URL` - **Never return secrets:** no SMTP credentials, JWT secret, or full connection strings. Tests check this. - **System info** page linked from the sidebar for the administrator. Settings that are off include a short hint on how to turn them on. **Done when** - e2e tests cover root-only access and the no-secrets rule. - A component test covers the page.

vmanne-poc added this to the Phase 9.5: Project workspace UI milestone

2026-10-15 01:05:03 -04:00

vmanne-poc added the

security

feature

labels

2026-10-15 01:05:03 -04:00

vmanne-poc referenced this issue from a commit

2026-10-15 07:43:31 -04:00

Project rename and summary endpoints; administrator system info

vmanne-poc referenced this issue from a commit

2026-10-15 07:43:31 -04:00