Accounts & email
Gödel Tally has its own email-and-password accounts. The first registered user is the administrator; later users join through invitations.
Users and invitations#
Administrators manage users and invitations from Users. Invite each teammate using their own email and assign the appropriate role. Members have narrower access than administrators; administrative configuration and data deletion remain restricted.
Use the configured HTTPS origin for registration and sign-in. The browser receives an HttpOnly secure session cookie. A failed sign-in or registration attempt ends the previously presented session.
Configure email delivery#
Open Settings → Email delivery. Supported providers are SMTP, AWS SES, Resend, SendGrid, Mailgun, and Postmark. Save the configuration, then use Send test. Provider sender verification and recipient restrictions still apply.
Secrets are encrypted with TALLY_SECRET_KEY. For the same provider, leaving a saved secret blank retains it. AWS SES can use explicit keys or the server's AWS credential chain.
Saved email settings override environment values; disabling email in Settings also disables environment-configured delivery. Password reset links use TALLY_URL, not an untrusted request Host header.
Password recovery#
Select Forgot password? on the sign-in page. With email configured, the user receives a single-use link valid for one hour. Resetting a password revokes that account's existing sessions. Changing a password also invalidates outstanding reset links and other sessions.
Without email, an administrator can issue a reset link from Users and share it privately. Existing accounts without a password can use the same flow.