- Users and permissions
== Account creation
By default, anyone can sign up. Instance admins can disable signups from /admin.
== Roles
=== Instance-level - Instance admin: full control over the entire instance. Can manage all users, wikis, and instance settings. Created via ADMIN_USER env var on first boot.
=== Wiki-level - Owner: created the wiki; can do everything including deleting the wiki. - Admin: can manage members, edit CSS, delete pages. - Editor: can edit pages. - Banned: blocked from viewing or editing (on private or public wikis depending on settings). - Member: on private wikis, members can view and edit.
== Passwords - PBKDF2-SHA256 with per-user salt, 120 000 iterations. - Minimum 8 characters. - Forgotten passwords can be reset by an instance admin from /admin, or via CLI: `node scripts/change-password.js <username> <new-password>`.