diff --git a/scripts/smoke.sh b/scripts/smoke.sh
index 226f29b..7db9da2 100755
--- a/scripts/smoke.sh
+++ b/scripts/smoke.sh
@@ -28,4 +28,24 @@ echo "$tags righe con data-tag= in home (atteso >= 1)"
 badges=$(curl -s 'http://localhost:4399/?annotate=1' | grep -c 'tag-badge' || true)
 echo "$badges tag-badge da anonimo con ?annotate=1 (atteso 0)"
 [ "$badges" = "0" ] || fail=1
+
+# /login pubblico raggiungibile
+code=$(curl -s -o /dev/null -w '%{http_code}' http://localhost:4399/login)
+echo "$code /login"
+[ "$code" = "200" ] || fail=1
+
+# Header mostra "Accedi" da anonimo
+curl -s http://localhost:4399/ | grep -q 'Accedi' || { echo "FAIL: link Accedi assente"; fail=1; }
+
+# Nessun badge tag-badge da anonimo sulla home semplice
+badges2=$(curl -s http://localhost:4399/ | grep -c 'tag-badge' || true)
+echo "$badges2 tag-badge da anonimo in home semplice (atteso 0)"
+[ "$badges2" = "0" ] || fail=1
+
+# Rotta gestione utenti protetta (redirect al login da anonimo)
+code=$(curl -s -o /dev/null -w '%{http_code}' http://localhost:4399/admin/users)
+echo "$code /admin/users (atteso 302)"
+[ "$code" = "302" ] || fail=1
+
+echo "smoke ruoli/login/inline OK"
 exit $fail