This website requires JavaScript.
3572b482e8
added tests
2026-03-07 02:02:14 +01:00
7e134fe6b5
added QUIC ports to docker compose
2026-03-07 01:43:26 +01:00
264e80ed73
consolidate WAF into unified page, reorder sidebar nav
2026-03-06 23:58:02 +01:00
41c6db3a3f
waf suppressed rules: add by ID with lookup, search filter
2026-03-06 22:50:21 +01:00
9a82ad9033
hide revoked client certs by default, add show-revoked toggle
2026-03-06 22:38:18 +01:00
6ecd195073
redesign certificates page: tabs, drawers, relative expiry, status bar
2026-03-06 22:36:46 +01:00
d6658f09fd
fix mTLS: fail closed when all certs revoked, fix domain split ordering
2026-03-06 21:46:13 +01:00
90fa11ae3c
fix mTLS: trusted_leaf_certs requires trusted_ca_certs for chain validation
2026-03-06 21:18:33 +01:00
9fa57bcf28
fix mTLS: use trusted_leaf_certs for issued certs, surface CA delete errors
2026-03-06 18:21:48 +01:00
7760f2d2c8
normalise stale DetectionOnly engine mode on WafFields init
2026-03-06 17:33:39 +01:00
9bfa86f2fc
remove dead DetectionOnly coercion in buildWafHandler
2026-03-06 17:31:59 +01:00
9834fe20c9
simplify global WAF settings: replace toggle+radio with single switch
2026-03-06 17:30:13 +01:00
b348dae4be
remove DetectionOnly WAF mode
2026-03-06 17:27:08 +01:00
5cd92fe669
revert SecAuditEngine to RelevantOnly to prevent log flooding
2026-03-06 16:28:20 +01:00
70e9375b3a
add migration 0014 to drizzle journal
2026-03-06 16:12:10 +01:00
08e24b88d2
fix migration 0013 missing statement-breakpoint markers
2026-03-06 15:52:00 +01:00
e06b41b604
fix WAF detection mode and payload logging
2026-03-06 15:32:56 +01:00
044f012dd0
Added issued-client-cert tracking and revocation for mTLS
2026-03-06 14:53:17 +01:00
6acd51b578
export as .p12
2026-03-06 13:25:06 +01:00
333f7d4733
Revert "fix authentik not being removed when toggle is disabled"
2026-03-06 09:56:59 +01:00
641ab9ef34
fix authentik not being removed when toggle is disabled
2026-03-06 09:34:26 +01:00
c76004f8ac
better pki
2026-03-06 00:22:30 +01:00
94eba03595
fix: use inline PEM for imported TLS certs and CA certs in Caddy config
2026-03-05 22:40:37 +01:00
f3358c20cd
feat: add mTLS support for proxy hosts
2026-03-05 20:29:55 +01:00
c407a01ca4
update packages
2026-03-05 18:49:26 +01:00
bdd3019214
security: add same-origin CSRF check to state-changing user API routes
2026-03-05 01:04:18 +01:00
e44e932e45
fix: sync global WAF and GeoBlock settings to slave instances
2026-03-05 00:30:44 +01:00
bd4220c74c
feat: show WAF count in blocked stat card; clean up proxy hosts table
2026-03-04 22:44:52 +01:00
c20ba54b4c
feat: analytics WAF improvements — bar chart, host chips, country column
2026-03-04 22:42:10 +01:00
7ceeb84fc2
improve UX
2026-03-04 22:26:11 +01:00
d959fdf836
if waf for a host is not configured, suppressing a rule for a host should automatically set it to "merge with global" and enabled.
2026-03-04 21:27:15 +01:00
7341070c0d
Fix rule parsing for single reverse proxies
2026-03-04 21:16:11 +01:00
77d3e35c63
feat: clickable WAF event rows with detail drawer
2026-03-04 18:21:08 +01:00
edd4e6879f
fix: make WAF events table fit in viewport
2026-03-04 08:26:36 +01:00
54a2a9ea0d
feat: parse WAF rule logs for rule ID/message/severity
2026-03-04 08:21:49 +01:00
5e7ceedfe3
fix: filter WAF events by is_interrupted instead of messages array
2026-03-04 08:16:02 +01:00
ab7fb70ee4
fix: revert SecAuditEngine to On — RelevantOnly suppresses WAF-blocked logs
2026-03-04 02:29:06 +01:00
a2c6991abd
fix: only log WAF events where rules matched
2026-03-04 02:25:21 +01:00
e9f61481eb
fix: include OWASP CRS files via @-prefixed embedded FS paths
2026-03-04 02:19:21 +01:00
1c81e1a385
fix WAF: load_owasp_crs=true loads CRS automatically, no Include needed
2026-03-04 02:02:14 +01:00
d996f9461f
fix WAF: load_owasp_crs=true AND Include directives are both required
2026-03-04 01:57:44 +01:00
9bdf10a2c0
fix WAF: directives is a string not []string, keep Include for OWASP CRS
2026-03-04 01:54:43 +01:00
634f8f1593
fix WafFields: add missing waf_enabled hidden input
2026-03-04 01:52:34 +01:00
d7e20b10b5
fix WAF: use directives array and Include for OWASP CRS, fix log parser field paths
2026-03-04 01:49:22 +01:00
1a56e5e842
better ui
2026-03-04 00:31:02 +01:00
0dad675c6d
feat: integrate Coraza WAF with full UI and event logging
2026-03-03 22:16:34 +01:00
1b157afc72
Add .worktrees to .gitignore
2026-03-03 19:35:33 +01:00
1e3632f048
remove unused stuff
2026-02-28 21:31:34 +01:00
f7cd854cda
fix for log file permissions
2026-02-28 21:11:26 +01:00
f4acb0f637
remove —
2026-02-27 22:40:00 +01:00
494535d767
fixed website rendering chars
2026-02-27 22:34:35 +01:00
461df12ae8
fix search crash
2026-02-27 22:28:19 +01:00
6ac8fa5664
remove unneeded screenshots from readme
2026-02-27 22:27:03 +01:00
26e4a7c6f3
updated website
2026-02-27 21:58:04 +01:00
d7f0738bf0
update website
2026-02-27 21:32:36 +01:00
336c899b1e
updated screenshots
2026-02-27 21:07:08 +01:00
000607cee7
updated documentation
2026-02-27 20:10:54 +01:00
fb561f7433
update dependencies
2026-02-27 19:53:01 +01:00
a45a156068
fix pages viewing
2026-02-27 19:49:11 +01:00
3d88f565ca
fix: await searchParams Promise in all paginated pages (Next.js 15+)
2026-02-27 18:40:56 +01:00
f64eb2c8d0
fix: sync search state on navigation; move pagination before create form in access-lists
2026-02-27 18:05:15 +01:00
f7a092f1e4
feat: add pagination to certificates ACME table
2026-02-27 18:01:27 +01:00
5126273101
feat: add server-side pagination to access-lists page
2026-02-27 18:00:36 +01:00
6bd7fe92d8
feat: add server-side pagination to proxy-hosts page
2026-02-27 18:00:26 +01:00
ce042d968d
feat: add server-side pagination and search to audit-log page
2026-02-27 18:00:23 +01:00
8bf07011f9
feat: add paginated list functions to DB models
2026-02-27 17:58:23 +01:00
8555de7b9d
fix: use numeric timestamp comparison for cert expiry; extract PaginationBar to avoid unconditional useSearchParams subscription
2026-02-27 17:56:23 +01:00
89c5d4b838
feat: add pagination support to DataTable component
2026-02-27 17:53:23 +01:00
28f9fc1d8a
feat: show ACME cert expiry and issuer in certificates page
2026-02-27 17:51:14 +01:00
97ba5547f1
feat: add ACME cert scanner utility
2026-02-27 17:48:55 +01:00
27a7e6dab9
chore: mount caddy-data read-only to web container for cert scanning
2026-02-27 17:48:54 +01:00
f9fba6963b
docs: add implementation plan for ACME cert info and sitewide pagination
2026-02-27 17:44:26 +01:00
296d17205f
fix: count ACME-issued certs in overview (not just imported ones)
2026-02-27 16:19:24 +01:00
7e5626f328
fix: align nav icons with overview card icons
2026-02-27 16:03:26 +01:00
3a6a5297d6
fix: replace thin/outlined nav icons with solid filled equivalents
2026-02-27 15:31:19 +01:00
2096ebf1ed
fix: replace Outlined icon variants with filled equivalents for visual consistency
2026-02-27 15:25:19 +01:00
bfb6b2060f
fix: restore full-width nav list with rounded corners (borderRadius: 3)
2026-02-27 14:43:31 +01:00
155845f7ed
fix: distribute nav squircles evenly across full sidebar height
2026-02-27 14:39:41 +01:00
86172b38ed
feat: redesign nav as 2-column squircle icon tiles
2026-02-27 14:33:32 +01:00
0955084772
fix: swap Proxy Hosts and Analytics nav order
2026-02-27 14:27:05 +01:00
c8bc1f7500
fix: fixed-width host picker to prevent layout shift on long names
2026-02-27 13:32:59 +01:00
1028322645
fix: collapse selected host chips to count badge when >2 selected
2026-02-27 12:13:08 +01:00
50028581b0
feat: add Select All/Clear buttons to host picker, fix popup overscroll
2026-02-27 11:52:38 +01:00
e75018d686
fix: exclude IP address hosts from analytics host list
2026-02-27 11:47:03 +01:00
cf74451e9a
feat: MUI date-time pickers, multiselect hosts with search, fix host list
2026-02-27 11:42:54 +01:00
9e2007eb0c
feat: add custom date range picker, fix country click highlight on map
2026-02-27 10:38:02 +01:00
608fb9c6fe
fix: detect blocked requests via caddy-blocker log entries, add country click→map highlight
2026-02-27 09:22:06 +01:00
7553fe0bb5
fix: make world map fill available card height instead of fixed 340px
2026-02-27 02:00:00 +01:00
be2416d7b3
fix: normalize topojson numeric IDs to strip leading zeros for N2A lookup
2026-02-27 01:48:28 +01:00
1b5c392632
fix: switch to 50m topojson for sharper borders, show tooltip for all territories
2026-02-27 01:43:47 +01:00
a56e7ae83f
fix: unwrap polygon rings to fix antimeridian artifacts for Fiji, Russia, etc
2026-02-27 01:37:00 +01:00
c84a9f9ce9
fix: cut antimeridian for GeoJSON to fix Russia polygon artifact
2026-02-27 01:29:36 +01:00
d60010227e
fix: proper MapLibre choropleth with Popup, filter highlight, 1h/12h intervals
2026-02-27 01:08:55 +01:00
3dce8f7a01
fix: use mercator projection (naturalEarth unsupported in MapLibre), zoom 0 for full world view
2026-02-27 00:48:26 +01:00
69f222e51f
feat: migrate world map to react-map-gl/maplibre with Natural Earth projection
2026-02-27 00:43:01 +01:00
3569bece53
fix: redesign world map with interactivity and proper visuals
2026-02-26 21:49:27 +01:00
89a6a71d3e
fix: serve world-atlas topojson locally to satisfy CSP connect-src
2026-02-26 21:38:01 +01:00
8be69d2774
feat: add analytics dashboard with traffic monitoring
2026-02-26 20:43:23 +01:00
674e06e3c9
feat: replace country/continent TagInputs with visual flag pickers
2026-02-26 01:31:12 +01:00
3442beba19
fix: expand private_ranges to CIDRs before passing to caddy-blocker-plugin
2026-02-26 01:25:08 +01:00
fuomag9