v2.30.0 3ee801c

history of internal/app/run.go at v2.30.0

2026-03-28

5a1e21dfix: address CodeRabbit review findings on security hardening GPG Verifiedbrice

2026-03-27

552aacarefactor: deduplicate CIDR allowlist code and clean up GPG Verifiedbnema
66e4d1bfix: address CodeRabbit review feedback GPG Verifiedbnema
bcbd4d9security: harden production deployment defaults GPG Verifiedbnema

2026-03-25

a7406bcdocs(app): fix stale docstring on cleanupOrphanDomainResources GPG Verifiedbrice
b035b02fix(preview): move network removal after container removal GPG Verifiedbrice
9209a14refactor(app): split cleanupOrphanDomainResources into focused helpers GPG Verifiedbrice
8b31c1cfix(preview): propagate cleanup errors and defer container removal GPG Verifiedbrice
b32e7e8fix(preview): address CodeRabbit review feedback GPG Verifiedbrice
470ef27refactor(app): extract preview teardown functions to reduce complexity GPG Verifiedbrice
a67455dfeat(preview): wire orphan GC into ticker, change interval to 1h GPG Verifiedbrice

2026-03-23

d3fec5bchore: register default for deploy.attachment_readiness_timeout GPG Verifiedbrice
a025239feat: add AttachmentReadinessTimeout config field GPG Verifiedbrice

2026-03-22

5c72601refactor: extract startProxyServers helper from runServers GPG Verifiedbrice
e4d9ea0fix: address CodeRabbit review — internal auth scope restriction, IPv6 redirect, TTL cap, docs GPG Verifiedbrice
c8a82f0fix: address CodeRabbit PR review — error wrapping, redirect, validation, dedup GPG Verifiedbrice
a5ba9carefactor(auth): reject auth.type=password, remove stale config fields GPG Verifiedbrice
8d39436feat(auth): configurable TTL (default 15m) and admin scope support in /auth/token GPG Verifiedbrice
d22746brefactor(auth): remove password authentication from domain and service layer GPG Verifiedbrice
28746f8fix(security): harden auth, container limits, input validation, and proxy GPG Verifiedbrice

2026-03-18

fb3fd37fix(preview): address CodeRabbit review findings brice
3dd5c08feat(app): wire EnvLoader into preview service brice
ae4cf2cfeat(preview): remove routes from config on preview TTL expiry brice
76b1eb4feat(preview): wire deployer, route manager, volume cloner into preview service brice

2026-03-19

13bd9a4fix: address CodeRabbit review — sentinels, safety, docs, test robustness brice
7fb924cfix: lint — use presentation helpers, extract functions to reduce complexity brice
2439aa3refactor(admin): replace NewHandler positional params with HandlerDeps struct brice
a4b282ffix(preview): address review — error handling, logging, and cleanup in handler and service brice
ad3801ffeat(app): wire preview service, dispatcher, and TTL ticker in run.go brice
458a175feat(admin): add preview API endpoints — list, delete, extend brice

2026-03-18

05b767cfeat: infrastructure hygiene — runtime detection, upload cleanup, volume management (#131) bnema

2026-03-16

a78dfaafix: remove /admin/ from proxy mux to stop intercepting app routes brice

2026-03-15

ec22770refactor(proxy): move HTTP execution from usecase to adapter layer brice
f009838feat(container): wire AttachmentConfigProvider into container service brice

2026-03-14

9ef2c23refactor: address code review findings for env-aware redeploy brice
868d000feat: publish secrets.changed event and debounced redeploy handler brice

2026-03-05

b467aa8Harden env storage and admin cache handling brice
ec63ba9Harden auth secret handling and admin caching brice

2026-03-03

09c4c09chore: remove dead dns_suffix config field brice

2026-03-02

547a2f4feat: add deploy config for stabilization delay and probe timeouts brice

2026-03-01

2c769c5fix: drain in-flight registry requests before shutdown brice
c8b7fd0fix: reverse shutdown order — stop ingress before registry backend brice

2026-02-25

0ef5b19fix(review): address code review findings — correctness, robustness, observability bnema
c35e93dRevert "fix(lint): G117 annotate intentional secret-pattern fields in DTOs and config structs" bnema
b5f59d8fix(lint): G117 annotate intentional secret-pattern fields in DTOs and config structs bnema
2cd6dfbfix(app): include TLS server in graceful shutdown to drain active HTTPS connections bnema
56e2d9efix(review): address CodeRabbit findings from PR review bnema

2026-02-24

61c0290fix(auth): gordon auth internal reads stale creds when XDG_RUNTIME_DIR differs between daemon and CLI bnema

2026-02-13

24a521dfeat(images): add scoped prune with default retention and confirmation brice

2026-02-10

77e28e6fix: address second round of review feedback brice

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 7

Tags 106

↑↓ moveenter openesc close