Owen
2f65a8c124
Make offline checking intervals configurable
...
Fixes #3855
2026-10-13 09:35:09 -04:00
Owen
c6b1e5311e
Push client identities to newt
2026-10-12 17:03:27 -04:00
Owen
b43709903d
Add support for configuring load balancing strategy
2026-10-12 16:47:12 -04:00
Owen
cccc2d1200
Merge branch 'mtls' into dev
2026-10-12 16:25:25 -04:00
Owen
839b82041b
Merge branch 'blueprints' into dev
2026-10-12 16:25:18 -04:00
Owen
148bcd9d1b
Merge branch 'machine-roles' into dev
2026-10-12 16:25:13 -04:00
Owen
f82b209e69
Adjust path processing
2026-10-12 15:10:48 -04:00
Owen
5e93678122
Merge branch 'main' into dev
2026-10-12 15:06:51 -04:00
Owen Schwartz
1bda4c5f2e
Merge pull request #3892 from Tyagiquamar/fix/3862-pathmatch-redos
...
fix(server): avoid exponential backtracking in isPathAllowed
2026-10-12 14:48:17 -04:00
Owen
700f4423f9
Merge branch 'main' into dev
2026-10-12 14:28:44 -04:00
Tyagiquamar
b4812066c9
fix(blueprints): allow underscores in health check hostnames
2026-10-12 18:18:14 +05:30
Tyagiquamar
ee00ed5a65
fix(server): avoid exponential backtracking in isPathAllowed ( #3862 )
2026-10-12 18:18:07 +05:30
TiltedTeapot
3712921048
Propogated Changes. listen port is now accessed from db instead of config
2026-10-06 18:21:05 -06:00
Owen
bc2920af23
Support machine clients added to roles
2026-10-01 15:58:25 -04:00
Owen Schwartz
27e0f00d65
Merge pull request #3838 from kdcokenny/fix/traefik-ipv6-targets
...
fix: use formatEndpoint for local targets
2026-10-01 09:06:18 -04:00
kdcokenny
8c3d0bd7f6
fix: use formatEndpoint for local targets
2026-09-30 20:27:27 +00:00
Owen
8ff05c0ec3
Start pulling cert at 15 days (due to cert update)
2026-09-30 14:01:17 -04:00
Owen
c0c0cfb18a
Support exit-node as an alias for gateway type private resources
2026-09-29 13:59:46 -04:00
Owen
c92b2f22ba
Update version
2026-09-29 11:02:37 -04:00
Owen
393af877c9
Merge branch 'dev' of github.com:fosrl/pangolin into dev
2026-09-28 20:34:31 -04:00
Owen
90848581a1
Push gateway updates to clients
2026-09-25 11:51:38 -04:00
Owen
37ed8997f2
Add fist pass of mtls support
2026-09-24 16:56:57 -04:00
Owen
6ddb1550e9
Export blueprint functionality
2026-09-24 16:31:54 -04:00
Owen
e68963b852
Add comments about not processing gateway
2026-09-24 09:49:09 -04:00
Owen
021626d382
Send gateway resources downstream like cidr resources to newt
2026-09-24 09:49:09 -04:00
Owen
118120c9ce
Create gateway resources in blueprints
2026-09-24 09:49:09 -04:00
Owen
a17b870ed2
Adding gateway resources
2026-09-24 09:49:08 -04:00
Fra146
7ad56a8bae
Add config options and badger options injection
2026-09-24 11:42:05 +02:00
Owen
29d93a574b
Fix optional() type errors
2026-09-23 14:48:05 -04:00
Owen
d406cc61b5
Pull jit limit from org
2026-09-23 10:40:21 -04:00
Owen
6ec37220d6
Remove default from server
...
Fixes #3804
2026-09-23 10:33:49 -04:00
Owen
750f267451
Try to link email to org when creating for first time
2026-09-21 16:25:58 -04:00
Owen
0c752c9c29
Merge branch 'main' into dev
2026-09-21 15:21:12 -04:00
Owen Schwartz
3392120855
Merge pull request #3172 from Gulianrdgd/feature-response-headers
...
Feature response headers
2026-09-21 15:16:24 -04:00
Owen Schwartz
7e188ffae6
Merge pull request #3738 from breken-ai/fix/path-rule-percent-encoding
...
▚▚ fix(rules): decode percent-encoded PATH rule patterns before matching
2026-09-21 13:55:25 -04:00
Blacks-Army
8e2f9ea5ef
Add HTTP method matching to resource rules
...
Resolves #1408 .
A rule with match "METHOD" carries a comma-separated list of HTTP
methods in its value, e.g. "POST,PUT", and applies when the request
method is in that list. This makes it possible to leave GET public
while sending POST and PUT to auth, which rules could not express
before because both share the same path.
No new columns: the methods live in the existing rule value, so this
needs no migration and every existing rule keeps working unchanged.
The UI offers the ten registered methods. Blueprints and the API
accept any method token, so extension methods such as the WebDAV verbs
can be targeted too, and the UI preserves them when a rule set that
way is edited later.
2026-09-19 20:00:01 +02:00
Tyagiquamar
b74ded3a9c
fix(sqlite): tag per-migration database backups with version and prevent collisions
2026-09-18 21:31:00 +05:30
Hayyan Hajwani
9298ec7cdb
fix(setup): correct month index and zero-pad database backup file names
...
Backup names were built inline from Date#getMonth, which is zero-indexed, so a
backup taken on 12 September 2026 was written as db_2026-8-12_20-35-56.sqlite.
No field was zero-padded either, giving names like db_2026-8-12_20-36-2.sqlite.
Extract formatBackupTimestamp into server/lib and use it from both places that
built the string: the backupDb helper in migrationsSqlite.ts and the inline copy
in the 1.0.0-beta9 setup script. Padding every field also makes the names sort
lexicographically in the order the backups were taken.
Adds tests covering both reported names, single-digit padding and sort order.
Reverting the helper to the old formula fails them with the exact name from the
report.
2026-09-16 13:46:57 +05:30
Owen
324f3e50ff
Add license tiers
2026-09-15 16:25:53 -04:00
Owen
c6c12f1dcb
Support _FILE env vars
...
Closes https://github.com/fosrl/docs-v2/issues/141
2026-09-15 10:56:39 -04:00
Owen
c11bbe670f
Remove optional() where unneeded for zod 4
2026-09-15 10:23:37 -04:00
Owen
143b4cf757
Atomically write files to avoid races with traefik
2026-09-15 10:04:00 -04:00
Owen
56e758a656
Resolve oss build issue
2026-09-14 18:05:30 -04:00
miloschwartz
68821514a0
replace node cache in dns server
2026-09-14 17:41:41 -04:00
miloschwartz
8f1344a665
bump version and add 1.23 migrations
2026-09-14 17:18:31 -04:00
Owen
350f8c012a
Pull in static domains to the traefik config again
2026-09-14 16:48:10 -04:00
Owen
8a97ed5200
Move domain information to all in private
2026-09-14 16:48:10 -04:00
Owen
e66f7fe71b
Implement exit node check-in tracking and adjust logging for connection errors
2026-09-14 16:48:10 -04:00
Owen
ad343a7453
Wire up to start
2026-09-14 16:48:10 -04:00
Owen
7e4d38548f
Add certificate generation
2026-09-14 16:48:09 -04:00
Owen