a4ad10a872
Prevents unvalidated user input from reaching DOM sinks (href, template literals). Host is checked against a strict hostname regex; port is parsed as an integer and range-checked to 1-65535. An inline error message is shown on validation failure. Resolves CodeQL js/xss-through-dom alert #7. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Oikos Web Installer
A browser-based setup wizard for Oikos. Run it once to configure your .env,
start Docker, and create your admin account.
Usage
From the repository root:
node tools/installer/install-server.js
Then open http://localhost:8090 in your browser.
The server shuts down automatically after setup completes (or after 30 minutes of inactivity).
Requirements
- Node.js 18+
- Docker with Compose v2
- The repository cloned locally
What it does
- Guides you through all configuration options
- Writes
.envto the project root - Starts the Docker container (
docker compose up -d) - Polls the health endpoint until the container is ready
- Creates your first admin account via
POST /api/v1/auth/setup