captcha and honeypot on signup

2026-07-22 15:57:17 +02:00
parent 279469cd65
commit a24eef807c
6 changed files with 120 additions and 4 deletions
@@ -43,6 +43,10 @@ node build
 Set `STREBA_DATA_DIR` to move the SQLite database somewhere else (defaults to
 `./data`).

+Signup is protected by a self-hosted image captcha plus a honeypot field.
+For scripted signups (tests, provisioning) set `STREBA_CAPTCHA_BYPASS` to a
+secret value and submit it as the captcha answer.
+
 ## Peaks data

 A fresh database is seeded with ~80 curated famous peaks so the app works out