11 Commits

Include renames

Author	SHA1	Message	Date
mrhid6	b877024365	docs: server tags and workflow tag targeting	2026-08-04 13:44:16 +01:00
mrhid6	fa7c5d341d	docs: fix stale auth-provider references in rest-api and licensing docs	2026-08-03 11:08:22 +01:00
mrhid6	b6fc8c3f77	docs: document multiple auth providers and the callback URL change	2026-08-03 11:05:40 +01:00
mrhid6	165114471f	fix: Fixes to running on kubernetes	2026-07-31 10:34:10 +01:00
mrhid6	de78688093	feat: authenticate the server's Redis connection ... InitRedis now takes a username and password, read from REDIS_USERNAME and REDIS_PASSWORD, matching what admin has always done. Both empty keeps an unauthenticated Redis working; a password with an empty username is what a legacy requirepass instance needs, since go-redis then sends AUTH with one argument instead of two. This is what lets a Kubernetes install point at a managed Redis instead of the bundled one.	2026-07-31 09:36:31 +01:00
mrhid6	1fe608f531	fix: bound and complete console relay teardown, restore proxy_failed audit ... - Arm the unclaimed-relay watchdog in NewSession rather than Serve, so an agent that never opens its ProxyStream is bounded to 10s and reports reason "agent_timeout", per the design spec's failure-mode table. - Session.Close now also closes the accepted net.Conn (stored via setConn), so ConsoleProxy.Close() is an unconditional kill of the whole relay chain instead of only closing an already-idle listener. - Emit console.proxy_failed and end the console session from a defer in consoleTunnel guarded on relay.Reason(), since guac's OnDisconnect never runs when the connect callback errors -- which is the path every relay failure this feature introduces takes. Update the two docsite troubleshooting rows to match what the audit event can now actually show.	2026-07-31 09:21:07 +01:00
mrhid6	1e1546cb60	docs: document the agent-relayed console proxy ... Every console session now rides the agent's outbound gRPC connection instead of a direct guacd-to-target dial, so it works for servers behind NAT and now requires a live agent (409 agent_offline otherwise). Documents PROXY_ADVERTISE_HOST / PROXY_LISTEN_HOST and corrects reachability claims across the docsite and CLAUDE.md.	2026-07-31 09:10:05 +01:00
mrhid6	487de34a50	docs: Updated docs	2026-07-28 16:53:42 +01:00
mrhid6	0424547dd4	docs: Updated docs	2026-07-28 16:53:38 +01:00
mrhid6	5be9ddb2e5	fix: Fixed baked api url	2026-07-28 16:18:50 +01:00
mrhid6	f46fb7fc0e	feat: documentation site ... Docusaurus 3 docs-only site at docsite/, served statically by nginx under /docs on the marketing host. Covers getting started (self-hosted install through first server and first licence), the control plane, Vantage HQ, a reference section and operations. Wired into docker-compose.site.yml as docsite (3005:80) and into the image build workflow, rebuilding on its own directory only. Never added to the self-hosted compose file.	2026-07-28 15:46:33 +01:00