sami7777 created branch dc/DC-082-update-manager-compose-prefix in sami7777/dashcaddy 2026-08-19 04:45:25 +02:00
sami7777 pushed to dc/DC-082-update-manager-compose-prefix at sami7777/dashcaddy 2026-08-19 04:45:25 +02:00
089f5d2902 [glm-grade=A] fix(update-manager): compose-prefixed image names probe <project>/<service> not library/<project>-<service> (DC-082)
sami7777 pushed to dc/DC-081-log-insights-dispose at sami7777/dashcaddy 2026-08-19 03:56:24 +02:00
0e7bb97129 [glm-grade=A] fix(log-insights): wire dispose to /app/data paths + bound keepDays (DC-081)
sami7777 created branch dc/DC-081-log-insights-dispose in sami7777/dashcaddy 2026-08-19 03:50:01 +02:00
sami7777 pushed to dc/DC-081-log-insights-dispose at sami7777/dashcaddy 2026-08-19 03:50:01 +02:00
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 03:36:09 +02:00
98737995a9 Merge dc/DC-080: Tailscale admin endpoint validation hardening (DC-080) [glm-grade=B]
99ec6ebc53 fix(tailscale-admin): harden apiToken/tags/description validation (DC-080) [glm-grade=B]
Compare 2 commits »
sami7777 pushed to dc/DC-080 at sami7777/dashcaddy 2026-08-19 03:32:52 +02:00
99ec6ebc53 fix(tailscale-admin): harden apiToken/tags/description validation (DC-080) [glm-grade=B]
sami7777 created branch dc/DC-080 in sami7777/dashcaddy 2026-08-19 03:28:13 +02:00
sami7777 pushed to dc/DC-080 at sami7777/dashcaddy 2026-08-19 03:28:13 +02:00
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 02:53:29 +02:00
a7260436d1 fix(disaster-recovery): stage Caddyfile + close path-traversal in assets/themes (DC-079) [glm-grade=A]
sami7777 pushed to feature/dc-064-discover-adopt-fetcht at sami7777/dashcaddy 2026-08-19 02:52:58 +02:00
a7260436d1 fix(disaster-recovery): stage Caddyfile + close path-traversal in assets/themes (DC-079) [glm-grade=A]
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 02:36:34 +02:00
a4e4b24732 fix(update-manager): force IPv4 + per-request timeout + transient-only retry on registry digest probes (DC-078) [glm-grade=A]
sami7777 pushed to feature/dc-064-discover-adopt-fetcht at sami7777/dashcaddy 2026-08-19 02:36:13 +02:00
a4e4b24732 fix(update-manager): force IPv4 + per-request timeout + transient-only retry on registry digest probes (DC-078) [glm-grade=A]
0086de97da Merge feature/dc-064-discover-adopt-fetcht: DC-077 nesting-guard silent no-op fix [glm-grade=B]
Compare 2 commits »
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 02:07:55 +02:00
0086de97da Merge feature/dc-064-discover-adopt-fetcht: DC-077 nesting-guard silent no-op fix [glm-grade=B]
18ffd2e519 fix(nesting-guard): export dataDir from src/config/paths; harden fallback to platform-paths (DC-077) [glm-grade=B]
Compare 2 commits »
sami7777 pushed to feature/dc-064-discover-adopt-fetcht at sami7777/dashcaddy 2026-08-19 02:07:22 +02:00
18ffd2e519 fix(nesting-guard): export dataDir from src/config/paths; harden fallback to platform-paths (DC-077) [glm-grade=B]
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 01:41:36 +02:00
2fef1c47e5 fix(ca): gate per-service cert/key download behind TOTP+admin scope; require explicit PFX password; add rate limit (DC-076) [glm-grade=A]
sami7777 pushed to feature/dc-064-discover-adopt-fetcht at sami7777/dashcaddy 2026-08-19 01:40:39 +02:00
2fef1c47e5 fix(ca): gate per-service cert/key download behind TOTP+admin scope; require explicit PFX password; add rate limit (DC-076) [glm-grade=A]
e8c5a7a1fb Merge dc/DC-074-sites-ssrf: DC-074 sites SSRF hardening [glm-grade=A]
270e8d57e3 fix(sites): SSRF hardening — validate upstream + externalUrl reject private/reserved hosts (DC-074) [glm-grade=A]
7db152499c Merge dc/DC-073-caddy-upstreams-host-validation: DC-073 phantom-mute hardening [glm-grade=A]
a9bb4a1835 fix(caddy-upstreams): validate host is known upstream on all 3 mute endpoints (DC-073) [glm-grade=A]
Compare 8 commits »
sami7777 deleted branch dc/DC-074-sites-ssrf from sami7777/dashcaddy 2026-08-19 00:48:06 +02:00
sami7777 created branch dc/DC-074-sites-ssrf in sami7777/dashcaddy 2026-08-19 00:47:12 +02:00
sami7777 pushed to dc/DC-074-sites-ssrf at sami7777/dashcaddy 2026-08-19 00:47:12 +02:00
0fb2d68af9 fix(sites): SSRF hardening — validateUpstream() blocks private/reserved upstreams in /site and /site/external (DC-074) [glm-grade=A]