v2.31.0-dev6 8056b57

history of internal/app/run.go at v2.31.0-dev6

2026-04-08

18a333brefactor: remove deprecated compatibility shims GPG Verifiedbrice
1489816fix: remove deprecated middleware helper usages GPG Verifiedbrice

2026-04-03

e0293e4fix(podman): resolve named runtimes and detect container crashes GPG Verifiedbrice
6b418bdrefactor: move access log port to boundaries/out, fix hex arch violations GPG Verifiedbrice
2147872feat: wire access log config and middleware into application bootstrap GPG Verifiedbrice
487e687fix: normalize client_ip to clean IP without port in all log fields GPG Verifiedbrice

2026-04-02

ed50492fix: address PR review findings for HTTP CA onboarding hardening GPG Verifiedbrice

2026-04-01

39cdcd8docs: clarify HTTP onboarding comment intent GPG Verifiedbrice
29b9578refactor: consolidate RemoteAddr/trust helpers and host-port mapping GPG Verifiedbrice
6c74ee7http: add comment for ignored Atoi error, add request logging to onboarding gate GPG Verifiedbrice
956a990feat(http): restrict direct HTTP to CA onboarding GPG Verifiedbrice
f0b7906fix(http): derive public redirect URLs from request host GPG Verifiedbrice
aab20abfix(onboarding): correct public URLs and client trust guidance GPG Verifiedbrice
937d56dfix(app): handle error from srv.Shutdown in closeStarted cleanup GPG Verifiedbrice

2026-03-31

29dcc3bfix: address CodeRabbit review findings GPG Verifiedbrice
2604a62fix: harden PKI lifecycle, middleware coverage, and startup cleanup GPG Verifiedbrice
67e87d2fix: address all findings from deep code review GPG Verifiedbrice
a6947b2feat(server): add custom TLS certs, HTTPS redirect, and atomic intermediate store GPG Verifiedbrice

2026-03-30

5bf3a89refactor(pki): simplify after code review GPG Verifiedbrice
63f113efeat(server): add tls_port=0 opt-out and use unprivileged default ports GPG Verifiedbrice

2026-03-29

30b9539security(pki): harden internal CA and onboarding endpoints GPG Verifiedbnema
14736d4feat(pki): wire internal CA into server — dual HTTP/HTTPS handler chains, on-demand TLS GPG Verifiedbrice
1659415refactor: remove deprecated TLS config fields, forceHSTS, and self-signed cert generation GPG Verifiedbrice

2026-03-28

5a1e21dfix: address CodeRabbit review findings on security hardening GPG Verifiedbrice

2026-03-27

552aacarefactor: deduplicate CIDR allowlist code and clean up GPG Verifiedbnema
66e4d1bfix: address CodeRabbit review feedback GPG Verifiedbnema
bcbd4d9security: harden production deployment defaults GPG Verifiedbnema

2026-03-25

a7406bcdocs(app): fix stale docstring on cleanupOrphanDomainResources GPG Verifiedbrice
b035b02fix(preview): move network removal after container removal GPG Verifiedbrice
9209a14refactor(app): split cleanupOrphanDomainResources into focused helpers GPG Verifiedbrice
8b31c1cfix(preview): propagate cleanup errors and defer container removal GPG Verifiedbrice
b32e7e8fix(preview): address CodeRabbit review feedback GPG Verifiedbrice
470ef27refactor(app): extract preview teardown functions to reduce complexity GPG Verifiedbrice
a67455dfeat(preview): wire orphan GC into ticker, change interval to 1h GPG Verifiedbrice

2026-03-23

d3fec5bchore: register default for deploy.attachment_readiness_timeout GPG Verifiedbrice
a025239feat: add AttachmentReadinessTimeout config field GPG Verifiedbrice

2026-03-22

5c72601refactor: extract startProxyServers helper from runServers GPG Verifiedbrice
e4d9ea0fix: address CodeRabbit review — internal auth scope restriction, IPv6 redirect, TTL cap, docs GPG Verifiedbrice
c8a82f0fix: address CodeRabbit PR review — error wrapping, redirect, validation, dedup GPG Verifiedbrice
a5ba9carefactor(auth): reject auth.type=password, remove stale config fields GPG Verifiedbrice
8d39436feat(auth): configurable TTL (default 15m) and admin scope support in /auth/token GPG Verifiedbrice
d22746brefactor(auth): remove password authentication from domain and service layer GPG Verifiedbrice
28746f8fix(security): harden auth, container limits, input validation, and proxy GPG Verifiedbrice

2026-03-18

fb3fd37fix(preview): address CodeRabbit review findings brice
3dd5c08feat(app): wire EnvLoader into preview service brice
ae4cf2cfeat(preview): remove routes from config on preview TTL expiry brice
76b1eb4feat(preview): wire deployer, route manager, volume cloner into preview service brice

2026-03-19

13bd9a4fix: address CodeRabbit review — sentinels, safety, docs, test robustness brice
7fb924cfix: lint — use presentation helpers, extract functions to reduce complexity brice
2439aa3refactor(admin): replace NewHandler positional params with HandlerDeps struct brice

Keyboard shortcuts

Single-key shortcuts are on. ctrl k and esc work whatever this says.

ctrl k :
go to a section, branch, tag, file or repository
?
this list
j k
move the row cursor down / up
enter
open the row under the cursor; on Files, a directory opens or closes in place
↑ ↓ ← → home end
in the file tree (focus on a row): previous / next row, close / open a directory or go to its parent / first entry, first / last row. They never open a file
l h
on Files: open a directory or a file / close a directory or go up to its parent, then to the parent page. Elsewhere: into the side panel (on a merge request, its files) / back to the content; there j k move between its controls
g g G
first / last row
/
filter the list; on Files, find a file anywhere in the repository (esc clears, enter opens the best match)
b
switch branch or tag
g s g f g c g b g m g i g r g a
tabs: summary, files, commits, branches & tags, merge requests, issues, releases, actions (when available)
g h
home
w
wide mode: use the whole width of the screen, or not (remembered)
y
copy a permalink pinned to the commit
d u x
diff: split / unified / collapse or expand all
e E
diff: the whole file in view / every file, with the lines the hunks hide
n
merge request: next note in the diff
esc
close a dialog, leave a field

Branches 7

Tags 106

↑↓ moveenter openesc close