wmantly
aaa538c7f9
tos.md was baked into the repo and read once at startup, so changing the terms required a code change and deploy. It's now a Redis-backed singleton (models/tos.js), editable from a new "Terms of Service" card on the admin Dashboard, with the bundled tos.md used only as a one-time seed for new deployments. - routes/tos.js: GET (any authenticated user) / PUT (app_sso_admin only) via /api/tos. Saving can optionally reset every user's tos_accepted flag so they're asked to re-accept -- off by default, since a wording fix shouldn't re-prompt everyone. - routes/index.js: /tos and /onboarding now render the live content instead of a module-level constant computed once at process start.
80 lines
4.0 KiB
Markdown
80 lines
4.0 KiB
Markdown
# Terms of Service
|
|
|
|
> **This is a template.** SSO Manager ships this file as the initial seed for
|
|
> a new deployment's Terms of Service. Edit it from the admin Dashboard's
|
|
> "Terms of Service" card (no code change or redeploy needed) to adapt it to
|
|
> your own organization and jurisdiction before relying on it — this file
|
|
> itself is only read once, to seed that first version.
|
|
|
|
Welcome. By creating an account and using any services on this system, you agree to the following terms. Please read them carefully — they're short and written in plain English.
|
|
|
|
---
|
|
|
|
## 1. Who This Applies To
|
|
|
|
These terms apply to anyone with an account on this system, including but not limited to: SSH access, self-managed containers or VMs, and any other services accessible with your credentials.
|
|
|
|
---
|
|
|
|
## 2. Acceptable Use
|
|
|
|
- **Be respectful.** Treat other users and administrators with respect. Harassment, abuse, or intentionally disrupting other users' work is not tolerated.
|
|
- **Do no harm.** Do not attempt to access, modify, damage, or disrupt any system, service, or data you are not explicitly authorized to use — including systems outside this network.
|
|
- **No malicious activity.** Do not use your account to run port scans, exploits, denial-of-service attacks, spam campaigns, or any other activity intended to harm others.
|
|
- **No resource abuse.** Do not use shared infrastructure for cryptocurrency mining, bulk email, or other activities that consume excessive CPU, memory, disk, or bandwidth without prior approval.
|
|
|
|
---
|
|
|
|
## 3. Legal Compliance
|
|
|
|
- You agree to comply with all applicable laws in your jurisdiction and the jurisdiction where this service is operated.
|
|
- Do not store, transmit, access, or distribute any content that is illegal under applicable law.
|
|
- This includes but is not limited to: pirated software, copyrighted content you do not have rights to, and any material that is illegal in your jurisdiction.
|
|
|
|
---
|
|
|
|
## 4. Credential Security
|
|
|
|
- Do not share your password, SSH keys, or any other credentials with anyone — including administrators (who will never ask for your password).
|
|
- You are responsible for all activity that occurs under your account.
|
|
- If you suspect your account has been compromised, notify an administrator immediately and change your password.
|
|
|
|
---
|
|
|
|
## 5. Self-Managed Resources
|
|
|
|
Users with access to containers or virtual machines agree to additional responsibilities:
|
|
|
|
- You are **fully responsible** for everything you run inside your allocated resources.
|
|
- Keep your systems patched and reasonably secured. A compromised VM on the network is everyone's problem.
|
|
- Do not use your allocation to attack, scan, or probe other systems — on this network or anywhere else.
|
|
- Resource abuse (running workloads that harm shared infrastructure or network performance) may result in immediate suspension of your allocation.
|
|
- Do not expose services to the internet without coordinating with an administrator.
|
|
|
|
---
|
|
|
|
## 6. Privacy
|
|
|
|
- Your personal data (name, email address, phone number) is stored solely to operate this service. It will not be sold, rented, or shared with third parties.
|
|
- **Administrators reserve the right to inspect** activity logs, files, running processes, and system usage on shared infrastructure at any time — for security purposes, incident investigation, or to verify compliance with these terms.
|
|
- **You have no expectation of privacy** on systems, storage, or network traffic hosted on this infrastructure.
|
|
|
|
---
|
|
|
|
## 7. Account Termination
|
|
|
|
- Violation of any of these terms may result in **immediate account suspension or deletion without prior notice**.
|
|
- Administrators reserve sole discretion to terminate access for any reason.
|
|
|
|
---
|
|
|
|
## 8. Changes to This Agreement
|
|
|
|
This agreement may be updated at any time. The current version is always available at `/tos`. Continued use of the services after an update constitutes acceptance of the revised terms.
|
|
|
|
---
|
|
|
|
## Questions?
|
|
|
|
Reach an administrator through the SSO manager or your organization's usual support channel.
|