Krystie
ba23cdff02
Three coordinated changes to stop every gated *.sami service flipping red after ~20 probes: 1. health-checker.js _doRequest() now sends X-DashCaddy-HealthCheck: 1 on every outgoing probe. Caddy uses this header (combined with a trusted source IP via the new @healthcheckProbe matcher in the dashcaddy_auth snippet) to bypass forward_auth for local container probes. Without the bypass, forward_auth 401's every probe, and the authLimiter (20 req / 15 min, DC-027) caps us out within minutes. 2. evaluateHealth() default expectedStatusCodes now includes 401, 403, and 429. Defense in depth — if a future Caddy reload drops the bypass, 429 from the rate-limited gate no longer marks the service as down (it just means the gate answered, which proves the service is reachable through Caddy). 3. (start.sh — already shipped on the running container, will land with the next release build) ca.sami now maps to 100.121.150.22 (DNS2) instead of 127.0.0.1, which is the container's own loopback where nothing serves :443. The CA web UI lives on DNS2's Caddy. Tests: - evaluateHealth: 401, 403, 429 accepted by default - _doRequest: X-DashCaddy-HealthCheck: 1 always present - _doRequest: user-supplied headers preserved alongside marker Bump 1.14.7 → 1.14.8.
50 lines
1.6 KiB
JSON
50 lines
1.6 KiB
JSON
{
|
|
"name": "dashcaddy-api",
|
|
"version": "1.14.8",
|
|
"description": "DashCaddy API server - Dashboard backend for Docker, Caddy & DNS management",
|
|
"main": "server.js",
|
|
"scripts": {
|
|
"start": "node server.js",
|
|
"test": "jest",
|
|
"test:watch": "jest --watch",
|
|
"test:coverage": "jest --coverage",
|
|
"test:ci": "jest --ci --coverage --maxWorkers=2 --forceExit",
|
|
"test:unit": "jest --testPathPattern=__tests__/(?!routes|integration) --no-coverage",
|
|
"test:routes": "jest --testPathPattern=__tests__/routes --no-coverage",
|
|
"test:security": "jest --testPathPattern=(crypto-utils|credential-manager|csrf-protection|auth-manager|input-validator|backup-manager) --no-coverage",
|
|
"test:changed": "jest --onlyChanged --no-coverage",
|
|
"test:debug": "node --inspect-brk node_modules/jest/bin/jest.js --runInBand --no-coverage",
|
|
"lint": "eslint .",
|
|
"lint:fix": "eslint . --fix",
|
|
"format": "prettier --write '**/*.{js,json,md}'"
|
|
},
|
|
"dependencies": {
|
|
"compression": "^1.8.1",
|
|
"cors": "^2.8.6",
|
|
"dockerode": "^4.0.9",
|
|
"dropbox": "^10.34.0",
|
|
"express": "^4.22.1",
|
|
"express-rate-limit": "^7.5.1",
|
|
"helmet": "^8.1.0",
|
|
"js-yaml": "^4.1.1",
|
|
"jsonwebtoken": "^9.0.2",
|
|
"lru-cache": "^10.4.3",
|
|
"nodemailer": "^8.0.4",
|
|
"otplib": "^12.0.1",
|
|
"png-to-ico": "^2.1.8",
|
|
"proper-lockfile": "^4.1.2",
|
|
"qrcode": "^1.5.3",
|
|
"sharp": "^0.33.5",
|
|
"ssh2-sftp-client": "^11.0.0",
|
|
"validator": "^13.11.0",
|
|
"webdav": "^5.7.1",
|
|
"ws": "^8.20.0"
|
|
},
|
|
"devDependencies": {
|
|
"eslint": "^8.57.1",
|
|
"jest": "^29.7.0",
|
|
"prettier": "^3.8.1",
|
|
"supertest": "^6.3.4"
|
|
}
|
|
}
|