3435 Commits
Author SHA1 Message Date
Owen 2b3639c525 Support redirects 2026-10-21 11:09:50 -04:00
Owen 3090c74131 Fix pg migration import 2026-10-20 16:31:52 -04:00
Owen 1e675f824b Add email whitelist remote header to response 2026-10-20 16:15:22 -04:00
Owen d80c1ff27b License machines 2026-10-20 15:29:37 -04:00
Owen 77c0c96823 Show protected when using mtls 2026-10-20 15:02:07 -04:00
Owen ee8724f117 Move the offline intervals to the regular config 2026-10-20 12:15:46 -04:00
Owen d02d2f79ba Make sure the MTLS is enforced for redirects 2026-10-20 11:53:44 -04:00
Owen 3510054a92 MTLS for all public resources 2026-10-20 11:51:43 -04:00
Owen c799d3ab6b Kebab case the request and response headers 2026-10-20 11:47:51 -04:00
Owen de62f9c6c9 Put the mtls on the policy creation screen 2026-10-20 10:21:10 -04:00
Owen f4140fd6f6 Add mtls to blueprint, policy, and oss getTraefikConfig 2026-10-20 10:02:44 -04:00
Owen 6aaaae3819 Optionally forward identity headers 2026-10-20 09:50:02 -04:00
Owen ec184cdf33 Fix tier matrix bugs 2026-10-19 17:25:02 -04:00
Owen 702719ed76 Add badger to migration 2026-10-19 17:15:22 -04:00
Owen 4db8a49dfb Update tier matrix 2026-10-19 17:03:05 -04:00
Owen a56e67f852 Move mtls out of private 2026-10-19 16:58:45 -04:00
Owen ab4c105e75 Make rekey not private and in integration api 2026-10-19 16:55:10 -04:00
Owen 4dcae5ff58 Fix dynamic -> private import 2026-10-19 14:40:43 -04:00
Owen 65571d8eeb Relay port must have default value 2026-10-19 11:23:06 -04:00
Owen 4555ef8da8 Add 1.25 migrations 2026-10-19 11:16:36 -04:00
Owen 7ffd46f133 Merge branch 'main' into dev 2026-10-19 11:04:49 -04:00
Owen 8fe55d10b8 Fix cluster license registration 2026-10-16 15:28:40 -04:00
Owen 6989739bf9 Write mtls certs to files when using the TraefikConfigManager 2026-10-16 12:24:21 -04:00
Owen 2817af1816 Move mtls routes to private 2026-10-16 12:16:51 -04:00
Owen 9b59d90654 Move mtls schema to private 2026-10-16 11:46:56 -04:00
Owen feb247dc16 Add export all blueprints cli command 2026-10-16 10:58:59 -04:00
Owen 0866456605 Quiet log 2026-10-16 10:58:49 -04:00
Owen 04313e949d Fix the roles ui 2026-10-16 10:17:39 -04:00
miloschwartzandCursor 49c012800a Merge branch 'dev' into feat/redirect-tables
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-15 16:59:32 -04:00
miloschwartz d8c8fbc1c7 add hybrid route for remote nodes 2026-10-15 16:04:10 -04:00
miloschwartz a6a3816b56 more ui adjustments 2026-10-15 15:42:43 -04:00
Owen 1d567245d3 Import the right cache 2026-10-15 14:38:08 -04:00
miloschwartz 1f1d3d7e0f fix merge 2026-10-15 12:01:31 -04:00
miloschwartz 89f6748a1b Merge branch 'dev' into feat/redirect-tables 2026-10-15 11:47:55 -04:00
Owen f0b8a594cf Fix deleting orgs 2026-10-15 11:47:33 -04:00
miloschwartz 7386fa5234 ui improvements 2026-10-15 11:25:07 -04:00
Owen c5c19871eb Prevent overlapping exit node address selections 2026-10-15 10:10:41 -04:00
Owen 3601ca17f1 Manage cert enabled with leader election 2026-10-14 15:30:58 -04:00
choksi2212 9242c2c196 fix(org): build the deleteOrg child test under the pg config
deleteOrg.childTest.ts read its leftover counts with db.get(sql...), a better-sqlite3 driver method. The pg config type-checks the same file with the pg driver's types, where .get() does not exist, so build-postgres failed on PR #3895's head (TS2339 at deleteOrg.childTest.ts:108) and main has carried the break since the merge landed 40 seconds before the job reported red. Read the counts through the query builder instead - the same .select({ count: count() }) shape deleteOrg.ts itself uses, which compiles under both configs - keeping the observations JSON the parent test parses unchanged.

Signed-off-by: Manas Choksi <12302040701105@mbit.edu.in>
Signed-off-by: choksi2212 <choksi2212@users.noreply.github.com>
2026-10-13 23:11:28 +05:30
Owen 2f65a8c124 Make offline checking intervals configurable
Fixes #3855
2026-10-13 09:35:09 -04:00
choksi2212 dc579acc44 fix(org): clean up every site when deleting an org
deleteOrgById fetched the org's sites with .limit(1), so the per-site
cleanup loop ran for at most one site: the WireGuard deletePeer call,
the Newt terminate collection, and cleanupSiteAssociations were all
skipped for every other site in the org.

Drop the limit so every site is loaded, and mirror deleteSite.ts in the
loop: run cleanupSiteAssociations for newt sites so clients of other
orgs do not keep stale associations for the deleted sites.

Covered by a standalone regression test that seeds two wireguard and
two newt sites plus a stale association-cache row, runs deleteOrgById
against a stubbed exit node, and asserts all four sites were cleaned.
On the previous code the test fails with exactly the reported symptom:
one peer removal instead of two.

Fixes #3863
2026-10-13 06:52:56 +05:30
Owen 6bf4595969 Remove error language from warning 2026-10-12 17:13:48 -04:00
Owen c6b1e5311e Push client identities to newt 2026-10-12 17:03:27 -04:00
Owen b43709903d Add support for configuring load balancing strategy 2026-10-12 16:47:12 -04:00
Owen cccc2d1200 Merge branch 'mtls' into dev 2026-10-12 16:25:25 -04:00
Owen 839b82041b Merge branch 'blueprints' into dev 2026-10-12 16:25:18 -04:00
Owen 148bcd9d1b Merge branch 'machine-roles' into dev 2026-10-12 16:25:13 -04:00
Owen e461b231d5 Add labels to the integration api 2026-10-12 16:21:12 -04:00
Owen 9afcd68d68 Reduce image size by pruning stuff and things
Ref https://github.com/orgs/fosrl/discussions/2069
2026-10-12 15:41:50 -04:00
Owen 3d590493d6 Fix relayPort missing from list 2026-10-12 15:33:52 -04:00