 jkunz
|
ccb4dea91e
|
test(migrations): use example IP in fixtures
|
2026-06-04 03:54:32 +00:00 |
|
|
jkunz
|
b0b480873f
|
feat(settings): add DB-backed email and RemoteIngress hub settings
|
2026-06-04 03:46:31 +00:00 |
|
|
jkunz
|
9286f56316
|
fix(route-management): use canonical source bindings
|
2026-06-03 06:46:38 +00:00 |
|
|
jkunz
|
0aa1cde5eb
|
feat(http-redirects): add derived HTTP-to-HTTPS redirects
|
2026-06-03 03:24:55 +00:00 |
|
|
jkunz
|
6d5d23a691
|
fix(source-policy-compiler): normalize source policy route priorities to stable integers
|
2026-06-02 17:25:18 +00:00 |
|
|
jkunz
|
0e7765c740
|
feat(source-policy): add ordered route source policies with Gitea preset support
|
2026-06-02 00:29:13 +00:00 |
|
|
jkunz
|
22de50b544
|
fix(routes): ensure source profiles fully own route security
|
2026-05-31 15:26:18 +00:00 |
|
|
jkunz
|
a089b681c4
|
feat(monitoring-opsserver-radius): use active connection snapshots for proxy metrics and RADIUS network secrets
|
2026-05-30 19:57:09 +00:00 |
|
|
jkunz
|
9077b3dad6
|
feat(dns): support explicit DNS bind interface configuration
|
2026-05-29 17:56:33 +00:00 |
|
|
jkunz
|
42a5f6df7b
|
fix(dns): preserve parallel ACME TXT challenges and mixed-case DNS queries
|
2026-05-29 03:59:59 +00:00 |
|
|
jkunz
|
be38808795
|
feat(network): add top connected ASN activity to network monitoring
|
2026-05-28 08:47:12 +00:00 |
|
|
jkunz
|
37adcc9ddc
|
feat(vpn): use authenticated VPN route grants
|
2026-05-24 05:11:48 +00:00 |
|
|
jkunz
|
8188b4712c
|
feat(vpn): allow target profiles to grant non-vpnOnly routes by live client source IP
|
2026-05-21 23:44:01 +00:00 |
|
|
jkunz
|
98913c1977
|
feat(security): add queued IP intelligence observation and filtered retrieval for network and security views
|
2026-05-21 01:56:17 +00:00 |
|
|
jkunz
|
707fbc2413
|
fix(opsserver,vpn): tighten admin bootstrap behavior when the database is unavailable and include wildcard VPN profile matches in route access rules
|
2026-05-20 16:24:30 +00:00 |
|
|
jkunz
|
77c1738390
|
feat(ops-auth): add scoped API token auth across ops endpoints
|
2026-05-19 22:24:37 +00:00 |
|
|
jkunz
|
7986d01245
|
feat(opsserver): add admin user create/delete management and default hosted idp.global auth support
|
2026-05-19 17:06:50 +00:00 |
|
|
jkunz
|
70fcd46d52
|
feat(opsserver-admin): add persisted admin bootstrap flow with optional idp.global authentication
|
2026-05-14 00:30:09 +00:00 |
|
|
jkunz
|
47a1f5d7db
|
fix(vpn): harden VPN route access and wireguard client configuration handling
|
2026-05-13 13:42:12 +00:00 |
|
|
jkunz
|
8dd0c3def9
|
feat(gateway-clients): add managed gateway client administration and token-bound route ownership
|
2026-05-09 22:35:07 +00:00 |
|
|
jkunz
|
f78bddaede
|
feat(api-token-manager): seed and rotate the environment-managed admin API token during initialization
|
2026-05-09 17:30:37 +00:00 |
|
|
jkunz
|
97505935bb
|
feat(gateway-clients): add policy-based gateway client tokens and gateway client route and DNS management endpoints
|
2026-05-09 11:53:45 +00:00 |
|
|
jkunz
|
7e3b89d9b4
|
fix: remove default dcrouter admin password
|
2026-05-08 16:24:45 +00:00 |
|
|
jkunz
|
5fbe2eb80b
|
feat: add workapp mail sync API
|
2026-04-29 16:29:38 +00:00 |
|
|
jkunz
|
a22cc1c0eb
|
feat: add workhoster gateway API
|
2026-04-29 15:18:14 +00:00 |
|
|
jkunz
|
4ea339b85a
|
fix: modernize docker publishing
|
2026-04-29 10:03:34 +00:00 |
|
|
jkunz
|
7f3ab2499d
|
feat(security): compile network ranges and CIDR arrays into edge firewall policies
|
2026-04-26 20:49:57 +00:00 |
|
|
jkunz
|
b3751abd17
|
feat(monitoring): improve network activity metrics with live domain request rates and backend identifiers
|
2026-04-25 20:37:28 +00:00 |
|
|
jkunz
|
a466b88408
|
fix(vpn): handle VPN forwarding mode downgrades and support runtime VPN config updates
|
2026-04-17 14:28:19 +00:00 |
|
|
jkunz
|
2891e5d3ee
|
feat(routes): add remote ingress controls and preserve-port targeting for route configuration
|
2026-04-17 06:17:49 +00:00 |
|
|
jkunz
|
d780e02928
|
fix(routes): preserve inline target ports when clearing network target references
|
2026-04-16 22:21:07 +00:00 |
|
|
jkunz
|
39f449cbe4
|
feat(routes,email): persist system DNS routes with runtime hydration and add reusable email ops DNS helpers
|
2026-04-15 19:59:04 +00:00 |
|
|
jkunz
|
1d7e5495fa
|
feat(email): add persistent smartmta storage and runtime-managed email domain syncing
|
2026-04-14 13:11:48 +00:00 |
|
|
jkunz
|
58fbc2b1e4
|
fix(monitoring): align domain activity metrics with id-keyed route data
|
2026-04-14 09:33:41 +00:00 |
|
|
jkunz
|
9bb5a8bcc1
|
fix(dns,routes): keep DoH socket-handler routes runtime-only and prune stale persisted entries
|
2026-04-14 00:53:26 +00:00 |
|
|
jkunz
|
4aba8cc353
|
feat(routes): unify route storage and management across config, email, dns, and API origins
|
2026-04-13 17:38:23 +00:00 |
|
|
jkunz
|
f04feec273
|
fix(certificate-handler): preserve wildcard coverage during forced certificate renewals and propagate renewed certs to sibling domains
|
2026-04-08 00:56:02 +00:00 |
|
|
jkunz
|
1ddf83b28d
|
BREAKING CHANGE(vpn): replace tag-based VPN access control with source and target profiles
|
2026-04-05 00:37:37 +00:00 |
|
|
jkunz
|
55699f6618
|
feat(config): add reusable security profiles and network targets with route reference resolution
|
2026-04-02 15:44:36 +00:00 |
|
|
jkunz
|
bb6c26484d
|
BREAKING CHANGE(db): replace StorageManager and CacheDb with a unified smartdata-backed database layer
|
2026-03-31 15:31:16 +00:00 |
|
|
jkunz
|
c7de3873d8
|
feat(http3): add automatic HTTP/3 route augmentation for qualifying HTTPS routes
|
2026-03-19 19:06:15 +00:00 |
|
|
jkunz
|
1d0f47f256
|
feat(opsserver): add configurable OpsServer port and update related tests and documentation
|
2026-03-19 16:41:16 +00:00 |
|
|
jkunz
|
abde872ab2
|
feat(apiclient): add TypeScript API client (ts_apiclient) with resource managers and package exports
|
2026-03-06 07:52:10 +00:00 |
|
|
jkunz
|
ed3964e892
|
BREAKING CHANGE(opsserver): Require authentication for OpsServer endpoints, split handlers into authenticated view/admin routers, and make identity required on many TypedRequest interfaces
|
2026-03-03 21:39:20 +00:00 |
|
|
jkunz
|
4d6ac81c59
|
BREAKING CHANGE(opsserver): Return structured configuration (IConfigData) from opsserver and update UI to render detailed config sections
|
2026-02-23 21:34:50 +00:00 |
|
|
jkunz
|
735464e8e6
|
fix(deps/tests): bump two dependencies and disable cache in tests
|
2026-02-11 17:24:17 +00:00 |
|
|
jkunz
|
530ebbf3e4
|
BREAKING CHANGE(mta): migrate internal MTA to @push.rocks/smartmta and remove legacy mail/deliverability implementation
|
2026-02-11 16:32:49 +00:00 |
|
|
jkunz
|
e375adb80a
|
fix(smartproxy): upgrade @push.rocks/smartproxy to ^23.1.0 and adapt code/tests for its async getStatistics() API
|
2026-02-10 14:41:19 +00:00 |
|
|
jkunz
|
9e0e77737b
|
BREAKING CHANGE(config): convert configuration management to read-only; remove updateConfiguration endpoint and client-side editing
|
2026-02-03 23:26:51 +00:00 |
|
|
jkunz
|
b90650c660
|
fix(tests): update tests and test helpers to current email/DNS APIs, use non-privileged ports, and improve robustness and resilience
|
2026-02-01 18:10:30 +00:00 |
|