- Load IdPs and supported instance-setting groups as runtime overlays from /etc/secrets.
- Reject API mutations of deployment-managed resources and serialize authentication safety checks across database drivers.
- Preserve upgrade compatibility, demo SSO policy, stable IdP ordering, and driver-specific transaction retries.
Run the instance in private mode when instance_url is not configured: the API rejects anonymous requests except the auth-bootstrap set (sign-in, token refresh, instance profile/settings, SSO providers, share-link access) plus first-run user creation, and the web UI redirects anonymous visitors to /auth instead of /explore. Setting instance_url keeps the current public behavior. Access tokens and personal access tokens are never gated.
Enforcement lives in a shared Authorizer used by both the Connect interceptor and the gRPC-gateway middleware; the file server applies the same rule to public-memo attachments and avatars. Also merges the duplicated Authenticate/AuthenticateToUser token dispatch behind resolveBearer, dedups the AuthContext unauthenticated state, extracts the redirect decision into a pure shouldGatePrivateInstance helper, and prints the access mode at startup.
- Updated the isSuperUser function to only check for ADMIN role.
- Added SQL migration scripts for MySQL, PostgreSQL, and SQLite to change user roles from HOST to ADMIN.
- Created a new SQLite migration to alter the user table structure and ensure data integrity during the migration process.
* Rename checkDSN to checkDataDir
* Add option to set DSN and db driver
* Add mysql driver skeleton
* Add mysql container in compose for debug
* Add basic function for mysql driver
* Cleanup go mod with tidy
* Cleanup go.sum with tidy
* Add DeleteUser support for mysql driver
* Fix UpdateUser of mysql driver
* Add DeleteTag support for mysql driver
* Add DeleteResource support for mysql driver
* Add UpdateMemo and DeleteMemo support for mysql driver
* Add MemoRelation support for mysql driver
* Add MemoOrganizer support for mysql driver
* Add Idp support for mysql driver
* Add Storage support for mysql driver
* Add FindMemosVisibilityList support for mysql driver
* Add Vacuum support for mysql driver
* Add Migration support for mysql driver
* Add Migration support for mysql driver
* Fix ListMemo failed with referece
* Change Activity.CreateTs type in MySQL
* Change User.CreateTs type in MySQL
* Fix by golangci-lint
* Change Resource.CreateTs type in MySQL
* Change MigrationHistory.CreateTs type in MySQL
* Change Memo.CreateTs type in MySQL
* Add new database interface for SQL operations
* Move SQL code of Activity into Database
* Rename `Database` into `Driver`
* Move SQL code of SystemSetting into Driver
* Fix store.New in text code
* Change database into driver in the variables
* Change sqlite3.New into sqlite3.NewDriver
