Commit Graph

625 Commits

Author SHA1 Message Date
CI
82dad8d9cb docs(notification): document SSRF mitigations for custom webhooks 2025-11-29 17:40:40 +00:00
CI
bbe9ca3698 fix(notification): mitigate SSRF for webhook requests by resolving host to IP and using Host header 2025-11-29 17:38:40 +00:00
CI
143c0dfe43 chore(ci): CodeQL + seed + integration-test improvements 2025-11-29 17:09:51 +00:00
CI
fdab765cbd chore: update internal files for consistency and maintainability 2025-11-29 15:52:27 +00:00
CI
66bd5313c1 feat(notification): enhance webhook template handling with minimal and detailed options 2025-11-29 09:15:03 +00:00
Wikid82
66e37fbd69 Add new logo image to public assets 2025-11-29 04:08:56 -05:00
CI
fcc273262c test(caddy): cover invalid path branches; ci: handle go test non-zero when coverage file exists 2025-11-29 08:55:25 +00:00
CI
0c62118989 chore: ignore CodeQL DBs and analysis artifacts 2025-11-29 04:24:30 +00:00
CI
46eb444c97 test: tighten URL checks by parsing href host instead of substring checks 2025-11-29 03:24:31 +00:00
CI
7e5e3e4d38 chore: update go.work format by removing parentheses around backend usage 2025-11-29 02:49:21 +00:00
CI
c925994aa3 feat: add Codecov upload workflows for backend and frontend coverage 2025-11-29 02:49:21 +00:00
CI
55199c752a chore: configure gopls env/buildFlags to avoid scanning toolchain modules 2025-11-29 02:49:21 +00:00
CI
e4854763f4 chore: add gopls buildFlags for ignore-tagged tests 2025-11-29 02:49:21 +00:00
CI
ce8a51e6c7 fix(workflows): replace invalid semantic-version action with fallback script 2025-11-29 02:49:21 +00:00
CI
ebd8a8e92b chore: make scripts/check-version-match-tag.sh executable for pre-commit 2025-11-29 02:47:31 +00:00
Wikid82
83668da3d8 fix: reorder features in README for better clarity 2025-11-28 15:48:30 -05:00
Wikid82
d3d3bd9a22 fix: correct header level for Cerberus section in README 2025-11-28 15:40:06 -05:00
Wikid82
938692bbdc fix: update README to enhance project descriptions for Charon and Cerberus 2025-11-28 15:36:52 -05:00
Wikid82
9269a802dd fix: update README to reflect project name change from Caddy Proxy Manager+ to Charon 2025-11-28 15:16:33 -05:00
Wikid82
d96ff80f57 fix: add missing checkout step in test-image job
The test-image job was trying to run ./scripts/integration-test.sh
without first checking out the repository, causing CI failures.
2025-11-28 13:52:19 +00:00
Wikid82
2d68bc2d2d feat: improve bulk ACL modal with multi-select, progress indicator, and Select All/Clear
- Added checkboxes to select multiple ACLs at once
- Added Select All / Clear buttons for quick selection
- Added progress indicator when applying multiple ACLs
- ACLs are applied sequentially with visual feedback
- All tests passing with 81.32% coverage
2025-11-28 07:22:30 +00:00
Wikid82
d2f0226679 fix: resolve TypeScript any types and unused variable warnings 2025-11-28 06:27:00 +00:00
Wikid82
c123fe52fd docs: update documentation link format to use GitHub Pages URLs 2025-11-28 06:00:37 +00:00
Wikid82
3ca3067556 fix: update documentation links to point to the correct repository 2025-11-28 05:58:42 +00:00
Wikid82
74d7bf2ac3 feat: enhance Access List management with delete confirmation and backup functionality 2025-11-28 05:52:17 +00:00
Wikid82
7a37b2f480 docs: add features.md, restructure docs, simplify README as marketing page 2025-11-28 05:41:55 +00:00
Wikid82
d5d4caf9b4 Refactor pre-commit hooks to manual execution, enhance uptime monitoring with new models and batching notifications
- Updated .pre-commit-config.yaml to change hooks to manual execution for performance.
- Added UptimeHost and UptimeNotificationEvent models to support host-level monitoring.
- Enhanced UptimeService to batch notifications for multiple service failures on the same host.
- Implemented tests for notification batching and uptime host creation during sync.
- Improved formatDuration function for better readability of durations.
2025-11-28 04:00:36 +00:00
Wikid82
a4cff3c194 feat: Add security presets and related tests
- Implemented new security presets for access control lists, including geo-blacklist and known botnet IPs.
- Added tests for security presets functionality, including validation of preset structure and category/type checks.
- Created hooks for Docker and domains with comprehensive tests for fetching, creating, and deleting domains.
- Removed unused HealthStatus component.
- Updated ProxyHosts bulk delete tests to reflect changes in selection logic.
- Introduced integration test script for automated testing of proxy host creation and validation.
2025-11-28 02:54:44 +00:00
Wikid82
72fd121bdb fix: resolve race conditions and update golangci-lint config
- Fix TestCertificateHandler_Delete race condition:
  - Add WAL mode and busy_timeout to SQLite connection
  - Add sleep to allow background sync goroutine to complete
- Fix TestNotificationService_SendExternal_EdgeCases race condition:
  - Use atomic.Value for cross-goroutine string access
- Update .golangci.yml for version 2:
  - Add version field
  - Move linters-settings under linters.settings
  - Remove deprecated typecheck and gosimple linters
  - Update govet shadow check syntax
2025-11-28 00:54:47 +00:00
Wikid82
1a9c651efd feat: add windows and macos support to goreleaser
- Update .goreleaser.yaml:
  - Split builds into linux, windows, and darwin
  - Configure Zig as the C/C++ compiler for cross-compilation (CGO enabled)
  - Add zip archive format for Windows
  - Restrict deb/rpm packages to Linux builds
- Update .github/workflows/release-goreleaser.yml:
  - Add setup-zig action to install Zig compiler
  - Remove manual apt-get cross-compiler installation
2025-11-28 00:34:25 +00:00
Wikid82
ca4ddc4e3e feat: enhance dev workflow and prepare for goreleaser
- Update Makefile with new targets:
  - lint-backend: Run golangci-lint via Docker
  - lint-docker: Run hadolint via Docker
  - test-race: Run Go tests with race detection
  - benchmark: Run Go benchmarks
  - integration-test: Run local integration tests
- Update .pre-commit-config.yaml:
  - Add go-test-race hook
  - Add golangci-lint hook
  - Add hadolint hook
- Add .goreleaser.yaml configuration:
  - Define builds for linux/amd64 and linux/arm64
  - Configure archive creation (tar.gz)
  - Configure package creation (deb, rpm)
- Add .github/workflows/release-goreleaser.yml:
  - New workflow to test GoReleaser builds
  - Builds frontend first, then uses GoReleaser
  - Handles cross-compilation dependencies
2025-11-28 00:28:42 +00:00
Wikid82
fc27b5c42e feat: add security presets and block list recommendations for ACLs
- Add security preset system with curated threat intelligence
  - High-Risk Countries preset (RU, CN, KP, IR, etc.) ~800M IPs
  - Expanded Threat List preset ~1.2B IPs
  - Cloud Scanner IPs preset (Shodan, Censys) ~3K IPs
  - Tor Exit Nodes preset ~1.2K IPs (changes daily)
- Add tooltips linking to data sources (SANS ISC, Spamhaus, Tor Project)
- Add 'Get My IP' button to quickly add current IP to allowlist
- Add IP range calculator showing total IPs covered by rules
- Emphasize block lists over allow lists in UI
  - Renamed UI labels to show 'Recommended' for block lists
  - Added info box explaining why block lists are safer
- Add /system/my-ip API endpoint to fetch user's public IP
  - Handles X-Forwarded-For, X-Real-IP, CF-Connecting-IP headers
  - Returns IP and source (direct, proxy, Cloudflare, etc.)
- Add ARIA attributes to ProxyHosts checkboxes for accessibility

Block lists prevent lockouts while maintaining security by blocking
known threats instead of requiring explicit allow lists that can
inadvertently block legitimate users (especially CGNAT/mobile users).

Note: Bulk delete tests need refinement (event simulation) - tracked
separately.
2025-11-28 00:05:11 +00:00
Wikid82
ab334a2315 feat: add bulk delete with auto-backup and improve bulk actions UX
- Add bulk delete button with automatic backup creation before deletion
- Move checkbox column to the right side of the table
- Show '(all)' indicator when all hosts are selected
- Add comprehensive delete confirmation modal listing affected hosts
- Rename 'Bulk Actions' button to 'Manage ACL' for clarity
- Add CGNAT warning banner in Access Lists page
  - Explains why mobile/CGNAT connections may be blocked
  - Provides solutions for locked-out users
  - Includes tips for T-Mobile 5G, Starlink, and other CGNAT ISPs
- Improve error messaging and loading states

Addresses common CGNAT issues where geo-blocking fails due to
data center IP addresses appearing instead of user's location.
2025-11-27 17:43:20 +00:00
Wikid82
33e91e21c5 Remove obsolete implementation documents and scripts; delete SECURITY_IMPLEMENTATION_PLAN.md, VERSIONING_IMPLEMENTATION.md, cookies.txt, create_issues.sh, and frontend coverage report. 2025-11-27 16:11:02 +00:00
Wikid82
2f23cf1251 chore: update ignore files and add issue creation script
- Add *.cover and coverage_*.out patterns to gitignore
- Add recursive database patterns (backend/data/**/*.db)
- Ignore project implementation documentation files
- Add cookies.txt and create_issues.sh to gitignore
- Update dockerignore with same patterns for smaller images
- Add *.cover and *.out to codecov ignore
- Add scripts/create_bulk_acl_issues.sh for automated issue creation
2025-11-27 16:08:29 +00:00
Wikid82
459f9b6c52 docs: add comprehensive testing documentation for bulk ACL feature
- Create main testing issue with 64 manual test checkpoints
- Add 7 sub-issue templates for organized testing workflow
- Cover basic functionality, error handling, UI/UX, integration, cross-browser, and regression testing
- Include test environment setup and success criteria
2025-11-27 15:03:42 +00:00
Wikid82
05321e3a59 feat: implement bulk ACL application feature for proxy hosts 2025-11-27 14:55:00 +00:00
Wikid82
429de10f0f feat: implement access list management with CRUD operations and IP testing
- Added API integration for access lists including listing, creating, updating, deleting, and testing IPs against access lists.
- Created AccessListForm component for creating and editing access lists with validation.
- Developed AccessListSelector component for selecting access lists with detailed display of selected ACL.
- Implemented hooks for managing access lists and handling API interactions.
- Added tests for AccessListSelector and useAccessLists hooks to ensure functionality.
- Enhanced AccessLists page with UI for managing access lists, including create, edit, delete, and test IP features.
2025-11-27 08:55:29 +00:00
Wikid82
486c9b40c1 feat: Add security scanning capabilities with govulncheck and Trivy integration 2025-11-27 06:01:32 +00:00
Wikid82
51664416b6 feat: Enhance ProxyHost configuration with application presets and internal IP support 2025-11-27 03:54:41 +00:00
Jeremy
09231ed6da Merge pull request #242 from Wikid82/copilot/add-cgnat-solver-feature
docs: Add Plex Remote Access Helper & CGNAT Solver issue specification
2025-11-26 19:37:50 -05:00
copilot-swe-agent[bot]
3ca72b157c feat: Add Plex Remote Access Helper & CGNAT Solver issue specification
Co-authored-by: Wikid82 <176516789+Wikid82@users.noreply.github.com>
2025-11-27 00:20:03 +00:00
copilot-swe-agent[bot]
121021450f Initial plan 2025-11-27 00:16:09 +00:00
Wikid82
1efc18940c feat: enable security services in docker-compose and update logs navigation 2025-11-26 21:07:24 +00:00
Wikid82
6f55ac99c3 fix: improve uptime service test reliability by using local closed port 2025-11-26 18:57:19 +00:00
Wikid82
6e646eee3c fix: update security docs link and workflow base path 2025-11-26 18:53:10 +00:00
Wikid82
58edf44f3c feat: update security configuration and documentation for new service modes 2025-11-26 18:47:31 +00:00
Wikid82
c8a452f1a0 feat: implement modular security services with CrowdSec and WAF integration 2025-11-26 18:35:14 +00:00
Wikid82
06d0aca8a4 feat: update favicon and adjust logo/banner display in layout 2025-11-26 14:23:44 +00:00
Jeremy
7465a24347 Merge pull request #239 from Wikid82/development
Propagate changes from development into feature/beta-release
2025-11-26 08:37:18 -05:00