- Passwort-Reset

cd management
    npm run reset-password -- admin "neues-passwort"

  - Agent-Hardening
    backend/.env unterstützt jetzt:

    ALLOWED_MANAGEMENT_IPS="127.0.0.1,DEINE-MANAGEMENT-IP"

    Wenn gesetzt, akzeptiert der Agent nur Requests von diesen IPs.

  - Audit-Log
    Management speichert Aktionen wie Login, Logout, Node-Änderungen, Schedule-Updates, Backup/Restore, Settings-Änderungen.
  - Job-History
    Management speichert gestartete Backup/Restore/Scheduler-Jobs mit Node, VM, Typ, Agent-Job-ID und Status.
  - Operations-Seite
    Neue UI-Seite Operations mit:
      - Job History
      - Audit Log
  - systemd Templates

    deploy/systemd/incus-backup-agent.service
    deploy/systemd/incus-backup-management.service

  - Deployment-Doku

    docs/deployment.md

README.md

@@ -43,6 +43,13 @@ The management API stores nodes, users, sessions, and central schedules in SQLit
 
 The management API uses Node's built-in SQLite module and requires Node.js 22.5 or newer.
 
+Reset an existing admin password without deleting the database:
+
+```bash
+cd management
+npm run reset-password -- admin "new-password"
+```
+
 ## Frontend
 
 ```bash
@@ -62,3 +69,7 @@ Changing most node-agent values applies to new API calls and jobs immediately. C
 ## Safety Notes
 
 Restore is intentionally guarded twice: the backend validates the snapshot against the VM, and the UI requires typing the VM name before sending the restore request. Restore jobs are never retried automatically.
+
+## Deployment
+
+See `docs/deployment.md` for systemd units, management/agent split, and production setup notes.