Milo Schwartz
d25181118c
make auth page custom domains available in ee ( #3957 )
2026-10-21 18:07:31 -04:00
Owen
d02d2f79ba
Make sure the MTLS is enforced for redirects
2026-10-20 11:53:44 -04:00
Owen
3510054a92
MTLS for all public resources
2026-10-20 11:51:43 -04:00
Owen
f4140fd6f6
Add mtls to blueprint, policy, and oss getTraefikConfig
2026-10-20 10:02:44 -04:00
Owen
0866456605
Quiet log
2026-10-16 10:58:49 -04:00
miloschwartz and Cursor
49c012800a
Merge branch 'dev' into feat/redirect-tables
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-10-15 16:59:32 -04:00
Owen
1d567245d3
Import the right cache
2026-10-15 14:38:08 -04:00
miloschwartz
89f6748a1b
Merge branch 'dev' into feat/redirect-tables
2026-10-15 11:47:55 -04:00
Owen
b43709903d
Add support for configuring load balancing strategy
2026-10-12 16:47:12 -04:00
Owen
37ed8997f2
Add fist pass of mtls support
2026-09-24 16:56:57 -04:00
Fred KISSIE
14fda9cec0
♻️ Force disable redirects when domain is missing attached resource domain
2026-09-23 20:49:45 +02:00
Fred KISSIE
ca18320ca3
Merge branch 'dev' into feat/redirect-tables
2026-09-22 22:36:53 +02:00
Owen Schwartz
3392120855
Merge pull request #3172 from Gulianrdgd/feature-response-headers
...
Feature response headers
2026-09-21 15:16:24 -04:00
Fred KISSIE
57b80bf74e
♻️ Add ssl field to redirects and add traefik config to public file
2026-09-18 23:38:46 +02:00
Fred KISSIE
67f45023db
Merge branch 'dev' into feat/redirect-tables
2026-09-18 20:59:18 +02:00
Fred KISSIE
ec36317057
✨ finish redirect traefik config
2026-09-17 21:32:55 +02:00
Fred KISSIE
c51bcbb578
🚧 wip: traefik config for redirect
2026-09-16 19:30:10 +02:00
Owen
324f3e50ff
Add license tiers
2026-09-15 16:25:53 -04:00
Owen
9e25650f22
Fix service missing traefik issues
2026-09-15 10:04:00 -04:00
Fred KISSIE
a0c77a4c85
♻️ lil refactor
2026-09-14 23:52:27 +02:00
Fred KISSIE
fd7780528f
🚧 Create certificate for Redirect (in case of domain)
2026-09-14 23:42:20 +02:00
Owen
3421441635
Add cert_mode to know when to gen or pull certs
2026-09-14 16:48:09 -04:00
Julian van der Horst and Claude Opus 5
6ad09adefa
Merge upstream/dev into feature-response-headers
...
Resolve conflicts against upstream's refactors:
- server/db/sqlite/schema/schema.ts: adopt upstream's reindented
sqliteTable(name, cols, indexes) form for sites/resources, re-applying
the headers -> requestHeaders/responseHeaders split. Kept in sync with
the Postgres schema.
- server/lib/traefik/headersMiddleware.ts: extend upstream's extracted
buildCustomHeadersMiddleware helper to take requestHeaders and
responseHeaders and emit both customRequestHeaders and
customResponseHeaders.
- server/lib/traefik/getTraefikConfig.ts and
server/private/lib/traefik/getTraefikConfig.ts: keep upstream's helper
extraction and appendPathMatch refactor, dropping the superseded inline
blocks.
Also carry the feature forward onto code that moved upstream:
- The resource settings UI moved from resources/proxy/[niceId]/proxy to
resources/public/[niceId]/http, which dropped this branch's changes in
the previous merge. Re-add the request/response header inputs there and
rename the vestigial headers field on the tcp page.
- messages/da-DK.json is new upstream and still had the old customHeaders
key; rename it in line with the other locales.
Per the contributing docs, versioned migrations are intentionally omitted
so maintainers can write them at release time.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com >
2026-09-01 13:40:49 +02:00
Owen
114592add8
Show a warning if the logs are disabled to reduce confusion
2026-08-19 16:16:05 -04:00
Owen
7a61b182e0
Deduplicate inference resources by fullDomain to prevent duplicate routers
2026-08-17 17:13:22 -04:00
Owen
91b697b80b
Track public inference domains to avoid duplicate routers for siteResource aliases
2026-08-17 17:06:37 -04:00
Owen
af515f1072
Pass 2 bring over browser resources and http resource cert gen
2026-08-17 12:00:12 -04:00
Owen
c90c67eab3
Pass 1 of pulling traefik config into functions
2026-08-17 12:00:12 -04:00
Owen
11daf4f927
Move certificates
2026-08-17 12:00:12 -04:00
Owen
32d76ee2ac
Resolve cert not generated without a provider
2026-08-14 14:27:14 -04:00
Owen
234819f8f2
Dont load private resource inference without a exit node loaded
2026-08-14 12:23:20 -04:00
Owen
7291628f86
optionally stamp ip header for downstream use
2026-08-13 09:14:37 -04:00
Owen
5fbb205044
search the right resource
2026-08-12 17:52:39 -04:00
Owen
860fa47b7c
Split out the token header into a common middleware for efficiency
2026-08-12 16:30:42 -04:00
miloschwartz
49020fa6ea
add virtual api key validation in verifySession
2026-08-12 10:38:26 -04:00
Owen
184e1425a4
Private connection working with traefik
2026-08-06 17:22:01 -04:00
Owen
6cca5e0472
Use fulldoman instead of the alias for the site resources
2026-08-06 13:45:51 -04:00
Owen
75ce7e91d7
Restrict the ai site resource router to exit node subnet
2026-08-06 11:00:34 -04:00
Owen
796bf37141
ai gateway override only required sometimes
2026-08-05 16:24:01 -04:00
Owen
72d469b19c
Revert changes to traefik config to pull site resources
2026-08-04 17:17:51 -04:00
Owen
6526d7f225
Remove completions endpoints
2026-08-04 17:09:44 -04:00
Owen
36c0edc62e
Use p host to pass the host header
2026-08-04 17:08:59 -04:00
miloschwartz and Cursor
c085de1e9e
Merge branch 'aig' of https://github.com/fosrl/pangolin into aig
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 15:56:27 -04:00
miloschwartz
e38359c74f
add crud for adding providers and models to resources
2026-08-04 15:54:24 -04:00
Owen
2bf426bc22
dont restrict to enterprise and dont link with providers yet
2026-08-04 15:46:21 -04:00
Owen
1073011a2a
first pass of traefik -> basic gateway
2026-08-04 10:15:49 -04:00
Owen
9d581f3897
Fix types
2026-08-04 10:15:48 -04:00
Owen
33dd10c670
Rename subnet for clarity, pick subnet on client
2026-08-04 10:15:47 -04:00
Owen
7f2b3eb481
Move rate linmit to file
2026-08-03 14:34:11 -04:00
Owen
e84da6a8df
Add rate limits to sensitve pages
2026-08-03 14:08:09 -04:00
Milo Schwartz