v2.31.0-dev20 020cc00

history of internal/app/run.go at v2.31.0-dev20

2026-05-23

93fc814fix(runtime): harden reload and cleanup reporting GPG Verifiedbrice
78bf949fix(release): harden v2.31 readiness GPG Verifiedbrice

2026-05-10

ec88514Harden registry rename and startup recovery GPG Verifiedbrice

2026-05-05

86ffd72Move restart policy migration to startup GPG Verifiedbrice

2026-05-01

0537081Wire DNS config into ACME DNS-01 GPG Verifiedbrice
68f340dAdd global DNS config defaults GPG Verifiedbrice
90ab417Simplify Gordon onboarding routes GPG Verifiedbrice
d200400Address ACME onboarding review feedback GPG Verifiedbrice

2026-04-30

b026f15Address ACME hardening review feedback GPG Verifiedbrice
d015ae1Simplify ACME onboarding hardening GPG Verifiedbrice
e407583Harden ACME HTTP onboarding flow GPG Verifiedbrice
67091c0Address public TLS review findings GPG Verifiedbrice

2026-04-29

289a830Clean up public ACME TLS review issues GPG Verifiedbrice
a7df376address CodeRabbit public ACME TLS findings GPG Verifiedbrice
b85bb4esimplify public ACME TLS implementation GPG Verifiedbrice
ed49430add public ACME TLS support GPG Verifiedbrice

2026-04-26

a40ece3fix: apply CodeRabbit auto-fixes GPG Unverifiedcoderabbitai[bot]

2026-04-25

225cbb6fix: address coderabbit security review GPG Verifiedbrice
56bea54fix: harden image pulls and container runtime GPG Verifiedbrice
7f90f82fix: redact config and secure unsafe secrets GPG Verifiedbrice
9167cd9fix: harden autoroute env files and host canonicalization GPG Verifiedbrice
8488ad1fix: limit cumulative registry blob uploads GPG Verifiedbrice

2026-04-12

5569831fix(routes): tighten route handling and unify reload behavior (#167) GPG Unverifiedbnema

2026-04-08

18a333brefactor: remove deprecated compatibility shims GPG Verifiedbrice
1489816fix: remove deprecated middleware helper usages GPG Verifiedbrice

2026-04-03

e0293e4fix(podman): resolve named runtimes and detect container crashes GPG Verifiedbrice
6b418bdrefactor: move access log port to boundaries/out, fix hex arch violations GPG Verifiedbrice
2147872feat: wire access log config and middleware into application bootstrap GPG Verifiedbrice
487e687fix: normalize client_ip to clean IP without port in all log fields GPG Verifiedbrice

2026-04-02

ed50492fix: address PR review findings for HTTP CA onboarding hardening GPG Verifiedbrice

2026-04-01

39cdcd8docs: clarify HTTP onboarding comment intent GPG Verifiedbrice
29b9578refactor: consolidate RemoteAddr/trust helpers and host-port mapping GPG Verifiedbrice
6c74ee7http: add comment for ignored Atoi error, add request logging to onboarding gate GPG Verifiedbrice
956a990feat(http): restrict direct HTTP to CA onboarding GPG Verifiedbrice
f0b7906fix(http): derive public redirect URLs from request host GPG Verifiedbrice
aab20abfix(onboarding): correct public URLs and client trust guidance GPG Verifiedbrice
937d56dfix(app): handle error from srv.Shutdown in closeStarted cleanup GPG Verifiedbrice

2026-03-31

29dcc3bfix: address CodeRabbit review findings GPG Verifiedbrice
2604a62fix: harden PKI lifecycle, middleware coverage, and startup cleanup GPG Verifiedbrice
67e87d2fix: address all findings from deep code review GPG Verifiedbrice
a6947b2feat(server): add custom TLS certs, HTTPS redirect, and atomic intermediate store GPG Verifiedbrice

2026-03-30

5bf3a89refactor(pki): simplify after code review GPG Verifiedbrice
63f113efeat(server): add tls_port=0 opt-out and use unprivileged default ports GPG Verifiedbrice

2026-03-29

30b9539security(pki): harden internal CA and onboarding endpoints GPG Verifiedbnema
14736d4feat(pki): wire internal CA into server — dual HTTP/HTTPS handler chains, on-demand TLS GPG Verifiedbrice
1659415refactor: remove deprecated TLS config fields, forceHSTS, and self-signed cert generation GPG Verifiedbrice

2026-03-28

5a1e21dfix: address CodeRabbit review findings on security hardening GPG Verifiedbrice

2026-03-27

552aacarefactor: deduplicate CIDR allowlist code and clean up GPG Verifiedbnema
66e4d1bfix: address CodeRabbit review feedback GPG Verifiedbnema
bcbd4d9security: harden production deployment defaults GPG Verifiedbnema

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 7

Tags 106

↑↓ moveenter openesc close