css

server/README.md

@@ -49,8 +49,10 @@ python seed.py
 ## Users
 
 There is no public registration. All accounts are created by an administrator.
-Pages (`/`, `/home`, `/sensors`, `/api/docs`) and `GET /api/*` require login.
-`POST /api/*` stays open so devices can push data without a browser session.
+Pages (`/`, `/home`, `/sensors`, `/api/docs`) and dashboard data endpoints
+(`GET /api/sensors/:id/types`, `/readouts`, `/readouts/hourly`) require login.
+`GET /api/sensors` (list, needed by devices to resolve name to id) and
+`POST /api/*` stay open so devices can push data without a browser session.
 
 Set a secret key for sessions (required in production):
 
@@ -68,10 +70,10 @@ with the CLI command (flags, env vars, or interactive prompts):
 alembic upgrade head
 
 # Option 1: flags
-flask --app app create-admin --username admin --password 'sekret'
+flask --app app create-admin --username admin --password 'secret'
 
 # Option 2: environment variables (e.g. on first deploy)
-ADMIN_USERNAME=admin ADMIN_PASSWORD=sekret flask --app app create-admin
+ADMIN_USERNAME=admin ADMIN_PASSWORD=secret flask --app app create-admin
 
 # Option 3: interactive (asks for username/password)
 flask --app app create-admin