v2.14.0 5e11a00

history of internal/app/run.go at v2.14.0

2026-02-07

99c9ecbfix(deploy): honor explicit zero drain_delay and document instant switch GPG Verifiedbnema
7e326befix(deploy): add signal-based readiness and drain with documented timeouts GPG Verifiedbnema
4fba121fix(deploy): wire drain delay, prevent duplicate invalidation, and update docs GPG Verifiedbnema
1838ab2fix(deploy) synchronous proxy cache invalidation to prevent 503s during zero-downtime deploy GPG Verifiedbrice
1ac3076fix(backup): harden backup flows, scheduler safety, and admin/cli handling GPG Verifiedbrice
28497b7fix(backup): address review hardening and edge cases GPG Verifiedbrice
634f497feat(backup): add postgres backup MVP with admin and CLI flows GPG Verifiedbrice
08d5671feat(registry) add IP/CIDR allowlist middleware for registry access control GPG Verifiedbrice
657aee7fix(app) capture server refs for graceful shutdown, fix lint issues GPG Verifiedtag v2.12.0brice
e3862cbMerge branch 'main' into security/proxy-hardening-top10 merge GPG Unverifiedbnema
874c2dbfix(proxy) address Copilot and CodeRabbit review findings GPG Verifiedbrice
df419f4feat: add native TLS listener support GPG Verifiedbrice

2026-02-06

b6d1cf3fix(server) add graceful shutdown timeout and response/connection limits GPG Verifiedbnema
9b07d6afix(review) correct misleading comments, dead code, and error detection GPG Verifiedbnema
e8e1134fix(tests) use os.Getpid in PID test and add missing test cases GPG Verifiedbnema
0bd5d71fix(deploy): resolve live gordon PID across runtime paths GPG Verifiedbrice
c00c10cfix(registry): make blob chunk upload limit configurable GPG Verifiedbrice
acb0df2fix(logic): invalidate proxy cache on config reload, remove dead code GPG Verifiedbrice
ebd5aeafix(startup): start registry listener before auto-start GPG Verifiedbrice
67442d7fix(deploy): mark auto-start, reload, and config-reload as internal deploy GPG Verifiedbrice

2026-02-02

89e85a9fix(cli): address code review feedback from Copilot and CodeRabbit GPG Verifiedbrice
72d9712fix(app): always resolve log file path and support http.Flusher in logging middleware GPG Verifiedbrice

2026-02-01

41b10a9feat(proxy): make max body size configurable with 512MB default and return 413 on overflow GPG Verifiedbnema
372a0c5fix(security): use trusted-proxy-aware IP extraction in logging and remove CORS from proxy GPG Verifiedbnema

2026-01-31

d2f6768fix(review): address all code review issues from PR GPG Verifiedbnema

2026-01-30

3659333fix(secrets): harden pass storage and auth GPG Verifiedbnema
18f31a9docs(auth): simplify authentication setup GPG Verifiedbnema
5498bc4feat(auth): add token login and registry pull token GPG Verifiedbnema
6ee1d33feat(secrets): add pass-backed domain secrets migration GPG Verifiedbnema

2026-01-28

0df4d83feat(admin): validate image exists in registry before adding route GPG Verifiedbnema

2026-01-18

fb423a0chore: update module path to github.com/bnema/gordon and bump dependencies GPG Verifiedbrice
edb08f9fix(config): remove default auth.type that broke type inference GPG Verifiedbrice
4a71618refactor(config): infer auth type from config instead of explicit type field GPG Verifiedbnema
c37592dfix(security): wire SecurityHeaders middleware and add tests GPG Verifiedbnema
65d96d2refactor(registry): use RateLimiter interface in middleware GPG Verifiedbnema
912a154fix(security): add trusted proxy support and rate limit token endpoint GPG Verifiedbnema

2026-01-17

bfdb3cffeat(config): add unified API rate limit configuration GPG Verifiedbnema
6f1f4f3fix(security): add JWT nbf claim and env var for token secret GPG Verifiedbnema
9d1b34afeat!: require explicit auth credentials when auth.enabled=true GPG Verifiedbrice
faacc3cfeat!: merge secrets/registry_auth into unified auth config, add attachments CRUD CLI GPG Verifiedbrice
9ed3e41refactor: extract resolveLogFilePath to reduce cyclomatic complexity GPG Verifiedbrice
25f0ae5feat: add token revoke --all and improve scopes documentation GPG Verifiedbrice
a9ff59dfeat: add human-friendly duration parser for token expiry GPG Verifiedbrice
d95d72cfeat(cli): add bidirectional local/remote support for all commands GPG Verifiedbrice

2026-01-16

c642d32refactor(http): follow clean architecture in handlers GPG Verifiedbnema
22b6b85refactor(secrets): move domain validation to use case layer GPG Verifiedbnema
20ba381fix(admin): address security vulnerabilities in admin API GPG Verifiedbnema
1280049feat(cli): improve routes list with health probing GPG Verifiedbnema
9a1176cfeat(config): add gordon_domain as preferred alias for registry_domain GPG Verifiedbnema
ee1db19fix: address PR review comments from Copilot GPG Verifiedbnema

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 7

Tags 106

↑↓ moveenter openesc close