948 Commits
Author SHA1 Message Date
Owen 6989739bf9 Write mtls certs to files when using the TraefikConfigManager 2026-10-16 12:24:21 -04:00
Owen 2817af1816 Move mtls routes to private 2026-10-16 12:16:51 -04:00
Owen feb247dc16 Add export all blueprints cli command 2026-10-16 10:58:59 -04:00
Owen 04313e949d Fix the roles ui 2026-10-16 10:17:39 -04:00
miloschwartz a6a3816b56 more ui adjustments 2026-10-15 15:42:43 -04:00
miloschwartz 1f1d3d7e0f fix merge 2026-10-15 12:01:31 -04:00
miloschwartz 89f6748a1b Merge branch 'dev' into feat/redirect-tables 2026-10-15 11:47:55 -04:00
Owen 2f65a8c124 Make offline checking intervals configurable
Fixes #3855
2026-10-13 09:35:09 -04:00
Owen c6b1e5311e Push client identities to newt 2026-10-12 17:03:27 -04:00
Owen b43709903d Add support for configuring load balancing strategy 2026-10-12 16:47:12 -04:00
Owen cccc2d1200 Merge branch 'mtls' into dev 2026-10-12 16:25:25 -04:00
Owen 839b82041b Merge branch 'blueprints' into dev 2026-10-12 16:25:18 -04:00
Owen 148bcd9d1b Merge branch 'machine-roles' into dev 2026-10-12 16:25:13 -04:00
Owen f82b209e69 Adjust path processing 2026-10-12 15:10:48 -04:00
Owen 5e93678122 Merge branch 'main' into dev 2026-10-12 15:06:51 -04:00
Owen Schwartz 1bda4c5f2e Merge pull request #3892 from Tyagiquamar/fix/3862-pathmatch-redos
fix(server): avoid exponential backtracking in isPathAllowed
2026-10-12 14:48:17 -04:00
Owen 700f4423f9 Merge branch 'main' into dev 2026-10-12 14:28:44 -04:00
Tyagiquamar b4812066c9 fix(blueprints): allow underscores in health check hostnames 2026-10-12 18:18:14 +05:30
Tyagiquamar ee00ed5a65 fix(server): avoid exponential backtracking in isPathAllowed (#3862) 2026-10-12 18:18:07 +05:30
TiltedTeapot 3712921048 Propogated Changes. listen port is now accessed from db instead of config 2026-10-06 18:21:05 -06:00
Owen bc2920af23 Support machine clients added to roles 2026-10-01 15:58:25 -04:00
Owen Schwartz 27e0f00d65 Merge pull request #3838 from kdcokenny/fix/traefik-ipv6-targets
fix: use formatEndpoint for local targets
2026-10-01 09:06:18 -04:00
kdcokenny 8c3d0bd7f6 fix: use formatEndpoint for local targets 2026-09-30 20:27:27 +00:00
Owen 8ff05c0ec3 Start pulling cert at 15 days (due to cert update) 2026-09-30 14:01:17 -04:00
Owen c0c0cfb18a Support exit-node as an alias for gateway type private resources 2026-09-29 13:59:46 -04:00
Owen c92b2f22ba Update version 2026-09-29 11:02:37 -04:00
Owen 393af877c9 Merge branch 'dev' of github.com:fosrl/pangolin into dev 2026-09-28 20:34:31 -04:00
Owen 90848581a1 Push gateway updates to clients 2026-09-25 11:51:38 -04:00
Owen 37ed8997f2 Add fist pass of mtls support 2026-09-24 16:56:57 -04:00
Owen 6ddb1550e9 Export blueprint functionality 2026-09-24 16:31:54 -04:00
Owen e68963b852 Add comments about not processing gateway 2026-09-24 09:49:09 -04:00
Owen 021626d382 Send gateway resources downstream like cidr resources to newt 2026-09-24 09:49:09 -04:00
Owen 118120c9ce Create gateway resources in blueprints 2026-09-24 09:49:09 -04:00
Owen a17b870ed2 Adding gateway resources 2026-09-24 09:49:08 -04:00
Fra146 7ad56a8bae Add config options and badger options injection 2026-09-24 11:42:05 +02:00
Fred KISSIE 0b0f62d8de ♻️ fix types and validate destination Host correcly 2026-09-23 21:00:26 +02:00
Fred KISSIE 14fda9cec0 ♻️ Force disable redirects when domain is missing attached resource domain 2026-09-23 20:49:45 +02:00
Owen 29d93a574b Fix optional() type errors 2026-09-23 14:48:05 -04:00
Owen d406cc61b5 Pull jit limit from org 2026-09-23 10:40:21 -04:00
Owen 6ec37220d6 Remove default from server
Fixes #3804
2026-09-23 10:33:49 -04:00
Fred KISSIE ca18320ca3 Merge branch 'dev' into feat/redirect-tables 2026-09-22 22:36:53 +02:00
Owen 750f267451 Try to link email to org when creating for first time 2026-09-21 16:25:58 -04:00
Owen 0c752c9c29 Merge branch 'main' into dev 2026-09-21 15:21:12 -04:00
Owen Schwartz 3392120855 Merge pull request #3172 from Gulianrdgd/feature-response-headers
Feature response headers
2026-09-21 15:16:24 -04:00
Owen Schwartz 7e188ffae6 Merge pull request #3738 from breken-ai/fix/path-rule-percent-encoding
▚▚ fix(rules): decode percent-encoded PATH rule patterns before matching
2026-09-21 13:55:25 -04:00
Blacks-Army 8e2f9ea5ef Add HTTP method matching to resource rules
Resolves #1408.

A rule with match "METHOD" carries a comma-separated list of HTTP
methods in its value, e.g. "POST,PUT", and applies when the request
method is in that list. This makes it possible to leave GET public
while sending POST and PUT to auth, which rules could not express
before because both share the same path.

No new columns: the methods live in the existing rule value, so this
needs no migration and every existing rule keeps working unchanged.

The UI offers the ten registered methods. Blueprints and the API
accept any method token, so extension methods such as the WebDAV verbs
can be targeted too, and the UI preserves them when a rule set that
way is edited later.
2026-09-19 20:00:01 +02:00
Fred KISSIE 57b80bf74e ♻️ Add ssl field to redirects and add traefik config to public file 2026-09-18 23:38:46 +02:00
Fred KISSIE d06a261cd6 ♻️ refactor 2026-09-18 21:04:56 +02:00
Fred KISSIE 67f45023db Merge branch 'dev' into feat/redirect-tables 2026-09-18 20:59:18 +02:00
Fred KISSIE 2cb5cea48f ✨ handle redirect request in badger's verifySession 2026-09-18 20:29:52 +02:00