963 Commits
Author SHA1 Message Date
Owen 3090c74131 Fix pg migration import 2026-10-20 16:31:52 -04:00
Owen 77c0c96823 Show protected when using mtls 2026-10-20 15:02:07 -04:00
Owen ee8724f117 Move the offline intervals to the regular config 2026-10-20 12:15:46 -04:00
Owen d02d2f79ba Make sure the MTLS is enforced for redirects 2026-10-20 11:53:44 -04:00
Owen 3510054a92 MTLS for all public resources 2026-10-20 11:51:43 -04:00
Owen c799d3ab6b Kebab case the request and response headers 2026-10-20 11:47:51 -04:00
Owen f4140fd6f6 Add mtls to blueprint, policy, and oss getTraefikConfig 2026-10-20 10:02:44 -04:00
Owen ec184cdf33 Fix tier matrix bugs 2026-10-19 17:25:02 -04:00
Owen 4db8a49dfb Update tier matrix 2026-10-19 17:03:05 -04:00
Owen ab4c105e75 Make rekey not private and in integration api 2026-10-19 16:55:10 -04:00
Owen 7ffd46f133 Merge branch 'main' into dev 2026-10-19 11:04:49 -04:00
Owen 6989739bf9 Write mtls certs to files when using the TraefikConfigManager 2026-10-16 12:24:21 -04:00
Owen 2817af1816 Move mtls routes to private 2026-10-16 12:16:51 -04:00
Owen feb247dc16 Add export all blueprints cli command 2026-10-16 10:58:59 -04:00
Owen 04313e949d Fix the roles ui 2026-10-16 10:17:39 -04:00
miloschwartz a6a3816b56 more ui adjustments 2026-10-15 15:42:43 -04:00
miloschwartz 1f1d3d7e0f fix merge 2026-10-15 12:01:31 -04:00
miloschwartz 89f6748a1b Merge branch 'dev' into feat/redirect-tables 2026-10-15 11:47:55 -04:00
Owen f0b8a594cf Fix deleting orgs 2026-10-15 11:47:33 -04:00
Owen c5c19871eb Prevent overlapping exit node address selections 2026-10-15 10:10:41 -04:00
choksi2212 9242c2c196 fix(org): build the deleteOrg child test under the pg config
deleteOrg.childTest.ts read its leftover counts with db.get(sql...), a better-sqlite3 driver method. The pg config type-checks the same file with the pg driver's types, where .get() does not exist, so build-postgres failed on PR #3895's head (TS2339 at deleteOrg.childTest.ts:108) and main has carried the break since the merge landed 40 seconds before the job reported red. Read the counts through the query builder instead - the same .select({ count: count() }) shape deleteOrg.ts itself uses, which compiles under both configs - keeping the observations JSON the parent test parses unchanged.

Signed-off-by: Manas Choksi <12302040701105@mbit.edu.in>
Signed-off-by: choksi2212 <choksi2212@users.noreply.github.com>
2026-10-13 23:11:28 +05:30
Owen 2f65a8c124 Make offline checking intervals configurable
Fixes #3855
2026-10-13 09:35:09 -04:00
choksi2212 dc579acc44 fix(org): clean up every site when deleting an org
deleteOrgById fetched the org's sites with .limit(1), so the per-site
cleanup loop ran for at most one site: the WireGuard deletePeer call,
the Newt terminate collection, and cleanupSiteAssociations were all
skipped for every other site in the org.

Drop the limit so every site is loaded, and mirror deleteSite.ts in the
loop: run cleanupSiteAssociations for newt sites so clients of other
orgs do not keep stale associations for the deleted sites.

Covered by a standalone regression test that seeds two wireguard and
two newt sites plus a stale association-cache row, runs deleteOrgById
against a stubbed exit node, and asserts all four sites were cleaned.
On the previous code the test fails with exactly the reported symptom:
one peer removal instead of two.

Fixes #3863
2026-10-13 06:52:56 +05:30
Owen c6b1e5311e Push client identities to newt 2026-10-12 17:03:27 -04:00
Owen b43709903d Add support for configuring load balancing strategy 2026-10-12 16:47:12 -04:00
Owen cccc2d1200 Merge branch 'mtls' into dev 2026-10-12 16:25:25 -04:00
Owen 839b82041b Merge branch 'blueprints' into dev 2026-10-12 16:25:18 -04:00
Owen 148bcd9d1b Merge branch 'machine-roles' into dev 2026-10-12 16:25:13 -04:00
Owen f82b209e69 Adjust path processing 2026-10-12 15:10:48 -04:00
Owen 5e93678122 Merge branch 'main' into dev 2026-10-12 15:06:51 -04:00
Owen Schwartz 1bda4c5f2e Merge pull request #3892 from Tyagiquamar/fix/3862-pathmatch-redos
fix(server): avoid exponential backtracking in isPathAllowed
2026-10-12 14:48:17 -04:00
Owen 700f4423f9 Merge branch 'main' into dev 2026-10-12 14:28:44 -04:00
Tyagiquamar b4812066c9 fix(blueprints): allow underscores in health check hostnames 2026-10-12 18:18:14 +05:30
Tyagiquamar ee00ed5a65 fix(server): avoid exponential backtracking in isPathAllowed (#3862) 2026-10-12 18:18:07 +05:30
TiltedTeapot 3712921048 Propogated Changes. listen port is now accessed from db instead of config 2026-10-06 18:21:05 -06:00
Owen bc2920af23 Support machine clients added to roles 2026-10-01 15:58:25 -04:00
Owen Schwartz 27e0f00d65 Merge pull request #3838 from kdcokenny/fix/traefik-ipv6-targets
fix: use formatEndpoint for local targets
2026-10-01 09:06:18 -04:00
kdcokenny 8c3d0bd7f6 fix: use formatEndpoint for local targets 2026-09-30 20:27:27 +00:00
Owen 8ff05c0ec3 Start pulling cert at 15 days (due to cert update) 2026-09-30 14:01:17 -04:00
Owen c0c0cfb18a Support exit-node as an alias for gateway type private resources 2026-09-29 13:59:46 -04:00
Owen c92b2f22ba Update version 2026-09-29 11:02:37 -04:00
Owen 393af877c9 Merge branch 'dev' of github.com:fosrl/pangolin into dev 2026-09-28 20:34:31 -04:00
Owen 90848581a1 Push gateway updates to clients 2026-09-25 11:51:38 -04:00
Owen 37ed8997f2 Add fist pass of mtls support 2026-09-24 16:56:57 -04:00
Owen 6ddb1550e9 Export blueprint functionality 2026-09-24 16:31:54 -04:00
Owen e68963b852 Add comments about not processing gateway 2026-09-24 09:49:09 -04:00
Owen 021626d382 Send gateway resources downstream like cidr resources to newt 2026-09-24 09:49:09 -04:00
Owen 118120c9ce Create gateway resources in blueprints 2026-09-24 09:49:09 -04:00
Owen a17b870ed2 Adding gateway resources 2026-09-24 09:49:08 -04:00
Fra146 7ad56a8bae Add config options and badger options injection 2026-09-24 11:42:05 +02:00