fuomag9
98e5dbc898
fix: require auth for geoip-status endpoint
...
Remove /api/geoip-status from the middleware public routes allowlist so
unauthenticated requests are rejected before reaching the route handler.
The route handler already has requireUser() for defense-in-depth.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-25 01:47:48 +01:00
fuomag9
25e1f2acee
fix: make geoip-status a public endpoint (no auth required)
2026-02-25 01:31:06 +01:00
fuomag9
e64e522929
fix: allow unauthenticated access to geoip-status endpoint
2026-02-25 01:27:19 +01:00
fuomag9
1231150550
fix: require auth on geoip-status endpoint
2026-02-25 01:24:11 +01:00
fuomag9
ccef82cca8
feat: add GeoIP status API route and improved geoblock UI
2026-02-25 01:22:04 +01:00
fuomag9
18c890bb21
feat: redesign GeoBlockFields UI with tabs, Autocomplete tag inputs, and accordion
2026-02-23 23:55:40 +01:00
fuomag9
9254d8e910
fix: use node:http for Caddy admin API calls to avoid Sec-Fetch-Mode CORS triggering
2026-02-23 23:49:05 +01:00
fuomag9
4fac5e4d50
fix: remove --resume so Caddy always starts from Caddyfile with correct admin origins
2026-02-23 23:43:28 +01:00
fuomag9
85af993c77
fix: add Origin header to Caddy admin API requests to satisfy CORS origin check
2026-02-23 22:27:31 +01:00
fuomag9
497e58db14
fix: include admin origins in generated Caddy config so they survive /load
2026-02-23 21:50:50 +01:00
fuomag9
1cfdaa061c
fix: allow web container to reach Caddy admin API by adding origins
2026-02-23 21:43:50 +01:00
fuomag9
35471ec98c
fix: use GOPROXY=direct in xcaddy build to bypass module proxy cache
2026-02-23 20:44:24 +01:00
fuomag9
4332e1acbc
feat: make geoipupdate container opt-in via COMPOSE_PROFILES
2026-02-23 20:39:08 +01:00
fuomag9
c5a5c6b743
fix: add syncInstances to updateGeoBlockSettingsAction for consistency
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:39 +01:00
fuomag9
066c2851e4
feat: add global geoblocking section to settings page
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:38 +01:00
fuomag9
b0abb407c6
feat: add GeoBlockFields to create and edit proxy host dialogs
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:38 +01:00
fuomag9
7165dc4b05
fix: always render geoblock_mode hidden input regardless of showModeSelector
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:38 +01:00
fuomag9
821842b3a9
feat: add GeoBlockFields UI component
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:38 +01:00
fuomag9
c233c77bd8
fix: use consistent form parsing helpers in parseGeoBlockConfig
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:38 +01:00
fuomag9
bca740fcea
feat: add parseGeoBlockConfig to proxy host actions
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:38 +01:00
fuomag9
fd9aa986d9
fix: correct enabled logic in geoblock merge and route injection
2026-02-23 19:56:37 +01:00
fuomag9
80177bf067
feat: inject blocker handler into proxy routes for geoblocking
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:37 +01:00
fuomag9
f54b7db96f
fix: align GeoBlock hydrators with existing patterns in proxy host model
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:37 +01:00
fuomag9
a2daedd80a
Update .gitignore
2026-02-23 19:56:37 +01:00
fuomag9
e6e35646c0
feat: add GeoBlock types and hydration to proxy host model
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:37 +01:00
fuomag9
15208313a8
feat: add GeoBlockSettings type and helpers to settings
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:37 +01:00
fuomag9
8024c99a05
feat: add geoipupdate service and shared GeoIP volume
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-02-23 19:56:36 +01:00
fuomag9
e45507fcd7
feat: add caddy-blocker-plugin to Caddy Docker image
2026-02-23 19:56:36 +01:00
fuomag9
32f232ebee
better UI for dns pinning
2026-02-22 10:00:52 +01:00
fuomag9
bb8a0d1023
implemented upstream pinning
2026-02-22 01:11:56 +01:00
fuomag9
191b86af40
Update README.md
2026-02-19 20:42:05 +01:00
fuomag9
b6e5e27635
Merge pull request #42 from fuomag9/dependabot/docker/docker/caddy/golang-1.26
...
docker: bump golang from 1.25 to 1.26 in /docker/caddy
2026-02-16 08:03:02 +01:00
fuomag9
492e8f864c
Merge pull request #44 from fuomag9/dependabot/npm_and_yarn/production-dependencies-60db1f0149
...
deps(deps): bump the production-dependencies group with 2 updates
2026-02-16 08:02:48 +01:00
fuomag9
f302a6aba9
Merge pull request #43 from fuomag9/dependabot/npm_and_yarn/development-dependencies-e1a100722f
...
deps(deps-dev): bump the development-dependencies group with 3 updates
2026-02-16 08:02:22 +01:00
dependabot[bot]
2c396028e1
deps(deps): bump the production-dependencies group with 2 updates
...
Bumps the production-dependencies group with 2 updates: [@mui/icons-material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-icons-material ) and [@mui/material](https://github.com/mui/material-ui/tree/HEAD/packages/mui-material ).
Updates `@mui/icons-material` from 7.3.7 to 7.3.8
- [Release notes](https://github.com/mui/material-ui/releases )
- [Changelog](https://github.com/mui/material-ui/blob/master/CHANGELOG.md )
- [Commits](https://github.com/mui/material-ui/commits/v7.3.8/packages/mui-icons-material )
Updates `@mui/material` from 7.3.7 to 7.3.8
- [Release notes](https://github.com/mui/material-ui/releases )
- [Changelog](https://github.com/mui/material-ui/blob/master/CHANGELOG.md )
- [Commits](https://github.com/mui/material-ui/commits/v7.3.8/packages/mui-material )
---
updated-dependencies:
- dependency-name: "@mui/icons-material"
dependency-version: 7.3.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-dependencies
- dependency-name: "@mui/material"
dependency-version: 7.3.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-16 04:46:43 +00:00
dependabot[bot]
4ab7d896b7
deps(deps-dev): bump the development-dependencies group with 3 updates
...
Bumps the development-dependencies group with 3 updates: [drizzle-kit](https://github.com/drizzle-team/drizzle-orm ), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react ).
Updates `drizzle-kit` from 0.31.8 to 0.31.9
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases )
- [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.31.8...drizzle-kit@0.31.9 )
Updates `@types/node` from 25.2.2 to 25.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
Updates `@types/react` from 19.2.13 to 19.2.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react )
---
updated-dependencies:
- dependency-name: drizzle-kit
dependency-version: 0.31.9
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development-dependencies
- dependency-name: "@types/node"
dependency-version: 25.2.3
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development-dependencies
- dependency-name: "@types/react"
dependency-version: 19.2.14
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-16 04:46:18 +00:00
dependabot[bot]
9a6c192e25
docker: bump golang from 1.25 to 1.26 in /docker/caddy
...
Bumps golang from 1.25 to 1.26.
---
updated-dependencies:
- dependency-name: golang
dependency-version: '1.26'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-16 04:45:57 +00:00
fuomag9
322ee0f51a
update images
2026-02-13 23:19:22 +01:00
fuomag9
19bd2c8522
Update README.md
2026-02-13 23:02:02 +01:00
fuomag9
7e4df5e50b
removed redirect feature
2026-02-13 22:53:11 +01:00
fuomag9
78309e8435
Merge pull request #41 from fuomag9/dependabot/npm_and_yarn/development-dependencies-664f589749
...
deps(deps-dev): bump the development-dependencies group across 1 directory with 2 updates
2026-02-13 19:25:17 +01:00
dependabot[bot]
3beecd257e
deps(deps-dev): bump the development-dependencies group across 1 directory with 2 updates
...
Bumps the development-dependencies group with 2 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react ).
Updates `@types/node` from 25.1.0 to 25.2.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
Updates `@types/react` from 19.2.10 to 19.2.13
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.2.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: development-dependencies
- dependency-name: "@types/react"
dependency-version: 19.2.13
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: development-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-09 04:51:27 +00:00
fuomag9
eecacfb271
The static response feature has been completely removed
2026-02-09 01:15:28 +01:00
fuomag9
6d56cf2288
deprecate deadhosts, move it to the GUI as a custom response feature
2026-02-07 00:51:48 +01:00
fuomag9
8b7982059a
update packages
2026-01-30 11:35:42 +01:00
fuomag9
90916bd709
various security fixes
...
Sync secrets encrypted at rest
Sync endpoint hardening
Avatar upload SVG restriction
2026-01-25 11:27:14 +01:00
fuomag9
6fb39dc809
Implement slave-master architecture
2026-01-25 01:39:36 +01:00
fuomag9
648d12bf16
The fix now properly merges the DNS resolver config into the existing transport, preserving TLS settings for HTTPS upstreams
2026-01-22 22:44:31 +01:00
fuomag9
7f93e9e784
Implement custom dns servers
2026-01-22 20:47:56 +01:00
fuomag9
49cf4f5ed1
added load balancing settings
2026-01-21 22:23:17 +01:00