-
c27f4e40a3
changed port 3001 to 3000
develop
akanealw
2026-04-23 06:52:54 +00:00
-
f861b95c9b
set primary domain
akanealw
2026-04-22 10:39:37 +00:00
-
d6bb1871dd
changed bind mounts back to volumes
akanealw
2026-04-22 10:38:45 +00:00
-
12da316ace
testing
akanealw
2026-04-22 10:35:36 +00:00
-
3fb643f41e
changed volumes to bind mounts
akanealw
2026-04-22 10:28:30 +00:00
-
25cd4669b2
changed docker-compose to compose
akanealw
2026-04-22 10:26:00 +00:00
-
47af056a7c
changed port
akanealw
2026-04-22 10:23:33 +00:00
-
7a91843c79
updated config
akanealw
2026-04-21 22:54:55 +00:00
-
99819b70ff
added caddy-proxy-manager for testing
akanealw
2026-04-21 22:49:08 +00:00
-
4c5ad53370
Fix inflated certificate counts in dashboard and certificates page
fuomag9
2026-04-20 21:01:39 +02:00
-
d710ad1247
Remove unnecessary IONOS field name migration
fuomag9
2026-04-20 18:09:33 +02:00
-
6515da666f
Fix duplicate ACME entries for subdomains covered by wildcard ACME host
fuomag9
2026-04-20 18:04:38 +02:00
-
96bac86934
Fix L4 port manager failing to recreate caddy after Docker restart
fuomag9
2026-04-20 11:35:12 +02:00
-
dbfc340ea4
Fix logout redirect to 0.0.0.0 instead of configured BASE_URL
fuomag9
2026-04-20 09:51:40 +02:00
-
521a059414
deps(deps): Bump better-auth in the production-dependencies group (#116)
dependabot[bot]
2026-04-20 05:07:02 +00:00
-
1be8fc2629
deps(deps-dev): Bump the development-dependencies group with 3 updates (#115)
dependabot[bot]
2026-04-20 05:06:24 +00:00
-
6d2827a132
ci(deps): Bump dependabot/fetch-metadata from 2 to 3 (#114)
dependabot[bot]
2026-04-20 05:03:28 +00:00
-
eb11856994
Update README for multi-provider DNS, forward auth excluded paths
fuomag9
2026-04-18 22:24:04 +02:00
-
7d61528dad
Fix login rejection for usernames containing hyphens
fuomag9
2026-04-18 12:15:18 +02:00
-
92fa1cb9d8
Fix duplicate certificate display for wildcard-covered subdomains
fuomag9
2026-04-18 12:10:17 +02:00
-
ef62ef232f
Fix IONOS DNS provider field name (api_token -> auth_api_token)
fuomag9
2026-04-18 00:57:36 +02:00
-
0e47ec4d7d
Fix Docker image tagging for pre-release versions
v1.0-rc3
fuomag9
2026-04-17 19:43:07 +02:00
-
5c78a8e8f6
Add IONOS DNS provider
v1.0-rc2
copilot/check-user-skill-or-software-functionality
fuomag9
2026-04-17 18:09:12 +02:00
-
2c70f2859a
Add multi-provider DNS registry for ACME DNS-01 challenges
fuomag9
2026-04-17 18:01:16 +02:00
-
60633bf6c3
Fix unused variable lint error in api-security test
fuomag9
2026-04-17 10:28:48 +02:00
-
a520717aab
Fix excluded_paths dropped by sanitize functions during creation
fuomag9
2026-04-17 10:21:18 +02:00
-
8f4c24119e
Add excluded paths support for forward auth (fixes #108)
fuomag9
2026-04-17 10:11:24 +02:00
-
390840dbd9
Add dependabot automerge workflow (#106)
Copilot
2026-04-17 01:29:29 +02:00
-
3a4807b5cd
deps(deps-dev): Bump the development-dependencies group with 3 updates (#104)
dependabot[bot]
2026-04-16 01:17:30 +02:00
-
0c632811b4
deps(deps): Bump the production-dependencies group with 5 updates (#105)
dependabot[bot]
2026-04-16 01:17:13 +02:00
-
81be14e95e
configure dependabot for bun ecosystem (#103)
Copilot
2026-04-16 01:12:33 +02:00
-
2adb8e3807
Fix migration crash when linking_tokens table does not exist
v1.0-rc1
v1.0-RC
fuomag9
2026-04-13 06:46:02 +02:00
-
8bb6dc8552
Update README for 1.0-RC: new OAuth callback URLs and auth env vars
fuomag9
2026-04-12 23:32:54 +02:00
-
1472f84c15
Create disabled-user.spec.ts
fuomag9
2026-04-12 23:25:28 +02:00
-
7f4a268cf7
Fix flaky E2E tests: strict mode violations, OAuth redirect, parallelism
fuomag9
2026-04-12 23:17:49 +02:00
-
a5c0df6a9c
Add comprehensive API security E2E tests
fuomag9
2026-04-12 22:29:13 +02:00
-
1237cdee4f
Fix lint errors: remove unused imports and fix type assertions
fuomag9
2026-04-12 21:57:56 +02:00
-
c136bc9247
Revert hash suffix on env-synced OAuth provider IDs
fuomag9
2026-04-12 21:55:35 +02:00
-
66f8e32df5
Fix security issues in Better Auth migration
fuomag9
2026-04-12 21:50:48 +02:00
-
3a16d6e9b1
Replace next-auth with Better Auth, migrate DB columns to camelCase
fuomag9
2026-04-12 21:11:48 +02:00
-
eb78b64c2f
update packages
fuomag9
2026-04-12 09:47:54 +02:00
-
f007f2df0c
Use safe test-range CIDRs in geoblock E2E tests to prevent worker interference
fuomag9
2026-04-11 19:16:49 +02:00
-
f9169c2ab2
Fix geo blocking form losing rules when switching tabs or collapsing accordion
fuomag9
2026-04-11 16:34:31 +02:00
-
eee4c7b718
Add LAN Only (RFC1918) preset button to geo blocking UI
fuomag9
2026-04-10 22:29:54 +02:00
-
dc121700fd
Suppress false-positive CodeQL ReDoS alerts on placeholder-stripping regex
fuomag9
2026-04-10 14:52:28 +02:00
-
6c30533014
Fix OG preview image to show the landing page instead of the dashboard
fuomag9
2026-04-10 14:38:48 +02:00
-
c7b1bf8b29
Update landing page to reflect current project features and refresh screenshots
fuomag9
2026-04-10 14:35:43 +02:00
-
95cb97b48a
Allow cdn.jsdelivr.net in CSP for Swagger UI API docs page
fuomag9
2026-04-10 14:15:37 +02:00
-
2dea2af20f
Add E2E container health tests to catch crash-looping sidecars
fuomag9
2026-04-10 13:23:19 +02:00
-
4e3f7e8ab7
Security hardening: fix SQL injection, WAF bypass, placeholder injection, and more
fuomag9
2026-04-10 12:13:50 +02:00
-
5d0b4837d8
Security hardening: fix SQL injection, WAF bypass, placeholder injection, and more
fuomag9
2026-04-10 12:13:50 +02:00
-
e1c97038d4
Migrate analytics from SQLite to ClickHouse
fuomag9
2026-04-10 00:05:38 +02:00
-
833284efb1
Add forward auth E2E tests with Dex OIDC provider
fuomag9
2026-04-09 21:10:28 +02:00
-
b7bd6b930a
Revert "Move forward auth redirect URI from query string to HttpOnly cookie"
fuomag9
2026-04-09 16:22:05 +02:00
-
a5f25cd733
deps(deps-dev): bump hono from 4.12.10 to 4.12.12 (#95)
dependabot[bot]
2026-04-09 15:52:37 +02:00
-
e1839d8b51
deps(deps-dev): bump @hono/node-server from 1.19.12 to 1.19.13 (#96)
dependabot[bot]
2026-04-09 15:40:48 +02:00
-
b6b53b7029
Move forward auth redirect URI from query string to HttpOnly cookie
fuomag9
2026-04-08 10:21:45 +02:00
-
16c92f9268
deps(deps-dev): bump vite from 8.0.1 to 8.0.5 (#94)
dependabot[bot]
2026-04-06 20:31:54 +02:00
-
fbf8ca38b0
Harden forward auth: store redirect URIs server-side, eliminate client control
fuomag9
2026-04-06 18:12:01 +02:00
-
38d29cb7e0
deps(deps-dev): bump picomatch from 2.3.1 to 2.3.2 (#92)
dependabot[bot]
2026-04-06 17:47:39 +02:00
-
b0f64fd491
deps(deps): bump the production-dependencies group with 7 updates (#91)
dependabot[bot]
2026-04-06 16:21:05 +02:00
-
1672e9a097
Add groups, mTLS roles, and forward auth to OpenAPI spec
fuomag9
2026-04-06 15:52:29 +02:00
-
23bc2a0476
Fix security issues found during pentest
fuomag9
2026-04-06 15:09:21 +02:00
-
d9fdaba031
Update README with forward auth, mTLS RBAC, user management, and groups
fuomag9
2026-04-06 14:37:32 +02:00
-
62707ddd21
Improve OAuth audit log messages with provider name and user identity
fuomag9
2026-04-06 13:56:56 +02:00
-
1ea6add989
Increase timeout for proxy hosts sort button visibility check
fuomag9
2026-04-06 13:51:57 +02:00
-
9940bea058
Hide traffic and recent activity from non-admin users on overview page
fuomag9
2026-04-06 10:28:05 +02:00
-
2f12475ab0
Fix E2E test locator ambiguity and lint errors
fuomag9
2026-04-06 09:59:11 +02:00
-
785cfb6cc5
Fix dashboard stat card selector and use Bun.password.hash for test users
fuomag9
2026-04-06 01:04:09 +02:00
-
bc5658f164
Fix 7 E2E test failures from strict mode violations and environment issues
fuomag9
2026-04-06 01:01:15 +02:00
-
7fe6b10788
Add E2E tests for untested pages and enforce role-based access control
fuomag9
2026-04-06 00:58:22 +02:00
-
155268a180
Fix 19 ESLint unused-variable errors across source and test files
fuomag9
2026-04-06 00:32:54 +02:00
-
0542ed56cb
Fix mTLS fail-closed bypass when all certs for a CA are revoked
fuomag9
2026-04-06 00:26:37 +02:00
-
6745a043a8
Document user roles (viewer/user/admin) in README
fuomag9
2026-04-06 00:03:53 +02:00
-
881992b6cc
Restrict analytics, GeoIP status, and OpenAPI spec to admin role
fuomag9
2026-04-06 00:02:13 +02:00
-
b81c211da9
Fix forward auth security vulnerabilities found during pentest
fuomag9
2026-04-06 00:01:10 +02:00
-
94efaad5dd
Add user management admin page with role, status, and profile editing
fuomag9
2026-04-05 22:40:10 +02:00
-
708b908679
Default new users to 'user' role instead of 'admin'
fuomag9
2026-04-05 22:33:30 +02:00
-
03c8f40417
Add forward auth portal — CPM as built-in IdP replacing Authentik
fuomag9
2026-04-05 22:32:17 +02:00
-
277ae6e79c
Add mTLS RBAC with path-based access control, role/cert trust model, and comprehensive tests
fuomag9
2026-04-05 18:40:21 +02:00
-
a2b8d69aa6
Update README.md
fuomag9
2026-04-03 15:53:37 +02:00
-
9f4287b7fd
Update funding information for GitHub and Ko-fi
fuomag9
2026-04-03 14:37:13 +02:00
-
830e92127e
Replace npm with bun in Dependabot config
fuomag9
2026-04-03 13:50:48 +02:00
-
4b84f25c38
fix ts6 baseurl
fuomag9
2026-04-03 12:42:58 +02:00
-
8598bdd132
update packages
fuomag9
2026-04-03 12:40:24 +02:00
-
b9a88c4330
fix: remove ACME cert scanning to eliminate caddy-data permission issue (#88)
fuomag9
2026-04-03 12:34:18 +02:00
-
49b869f0ca
fix: include WAF blocks in dashboard blocked counter
fuomag9
2026-04-03 10:15:13 +02:00
-
71ea811ad1
update packages
fuomag9
2026-04-03 00:59:53 +02:00
-
71502e4879
test: full pipeline integration test for geo-blocked request analytics
fuomag9
2026-04-03 00:13:05 +02:00
-
ebc297190d
fix: route geo-blocker log entries to access.log
fuomag9
2026-04-03 00:05:14 +02:00
-
6ce986f11f
feat: add LocationRule to OpenAPI spec and fix response_headers example
fuomag9
2026-03-28 15:01:50 +01:00
-
e26d7a2c3f
feat: improve LocationRulesFields UI and add unit tests for buildLocationReverseProxy
fuomag9
2026-03-28 14:49:56 +01:00
-
447dbcedde
feat: add LocationRulesFields UI component and form wiring
fuomag9
2026-03-28 11:25:57 +01:00
-
23e186a22e
feat: emit location rule routes in Caddy config generation
fuomag9
2026-03-28 11:13:17 +01:00
-
55f4ba4e80
fix: make location rules integration test honest about what it tests
fuomag9
2026-03-28 11:09:12 +01:00
-
0f9bd04ec7
feat: add LocationRule type and model layer support
fuomag9
2026-03-28 11:06:29 +01:00
-
f115f0cb13
update packages
fuomag9
2026-03-26 22:23:50 +01:00
-
b480c2cf5d
chore: remove finding-ID prefixes from code comments
fuomag9
2026-03-26 12:51:39 +01:00
-
4f2f090e2c
fix: resolve lint errors from security changes
fuomag9
2026-03-26 12:41:19 +01:00
-
c537a59f36
fix: trustHost should be true when NEXTAUTH_URL is set
fuomag9
2026-03-26 12:27:25 +01:00