4 Commits

Include renames

Author	SHA1	Message	Date
Hermes	c429b8fdd7	fix(security): redact-on-rotate for error.log archive + README PII docs (DC-108) [glm-grade=B] ... DC-095 masks emails at every live log sink; the rotated archive was the remaining belt-and-braces gap — any future sink that forgets masking would persist raw PII in error.log.1 for a full rotation cycle. appendErrorLog now scrubs the freshly rotated archive with the SAME canonical mask (sa****@example.com) via atomic rewrite (sibling .redact-<pid> temp, wx open preserving mode else 0600, fsync, rename). Scrub failure is caught and logged; the new error line is still appended. Stale crash-leftover .redact-<pid> temps are swept best-effort on every rotation. Also documents scripts/redact-log-pii.js usage in README (queue item e). Judge: GLM-5.3 cold read (deleg_e7cd7f8c), round-1 grade B ship — both nits addressed in-commit: stale-temp sweep (new 5th test pins it), quoted-local-part mask edge deferred as pre-existing DC-095 primitive. Tests: 122 suites / 2790 green (+5 DC-108 pins; was 2785 post-DC-107).	2026-08-23 05:22:04 -07:00
Hermes	7f6203b2f7	fix(readme): correct license badge — MIT to Proprietary EULA, bump version badge to 1.15.0 ... The README showed MIT license and version 1.0.0 — both wrong. LICENSE file is a 125-line proprietary EULA (added at v1.5.0). Version badge was stale from initial release. Refs: DashCaddy audit 2026-08-02	2026-08-03 00:37:15 -07:00
Hermes	8ec6c0ca6a	DC-012: Add Kubernetes-style /healthz + /readyz probe aliases ... Fresh users copy-pasting healthcheck blocks from k8s/Docker docs need the standard short aliases. Without /healthz and /readyz they get connection refused. This commit: 1. Adds /healthz + /readyz as root-level aliases for /health/live + /health/ready in src/app.js. Handler bodies DRYed into named functions (livenessHandler, readinessHandler) so a probe semantics change updates all five paths at once. 2. Removes the dead /api/v1/health*, /api/v1/health/live, /api/v1/health/ready registrations from PUBLIC_ROUTES and CSRF exclusion list — those routes were never actually mounted on the apiRouter (only root paths existed). Anyone probing /api/v1/health now gets a clean 404 instead of being routed through to a duplicate root handler. 3. Adds bypass for the 5 probe paths in three places where it matters: - PUBLIC_ROUTES (no auth) - csrf-protection.js excludedPaths (no CSRF check) - middleware.js request-logging exclusion (k8s polling every 10s doesn't flood the audit log) - middleware.js Tailscale auth bypass (probes don't carry Tailscale identity headers) 4. Adds __tests__/health-probe-aliases.test.js (19 tests): - Alias equivalence (/healthz == /health/live, /readyz == /health/ready) - Back-compat (/health == /health/live) - Path consolidation (all 3 /api/v1/health* return 404) - Source-of-truth PUBLIC_ROUTES allowlist sync check - Source-of-truth src/app.js mount list sync check (catches drift between handler mount and middleware allowlist) 5. Documents probes in README (copy-paste docker-compose.yml + Kubernetes blocks) and user-guide (Health Probes section + System API table updated). Post-fix: 941/941 tests pass (+19 new). Zero new ESLint warnings introduced. The pre-existing warnings/errors in src/app.js line 906 ('os' is not defined) and the empty blocks in logging.test.js are not regressions from this commit.	2026-06-25 17:16:16 -07:00
Sami	f61e85d9a7	Initial commit: DashCaddy v1.0 ... Full codebase including API server (32 modules + routes), dashboard frontend, DashCA certificate distribution, installer script, and deployment skills.	2026-03-05 02:26:12 -08:00