100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
mrhid6	d1b3cd2f74	feat: target workflow runs by tag selector	2026-08-04 13:36:43 +01:00
mrhid6	e00a0da5d9	feat: tag endpoints for servers	2026-08-04 13:34:22 +01:00
mrhid6	fef0b7c7a1	feat: read and write server tags, resolve targets from the database	2026-08-04 13:33:00 +01:00
mrhid6	efd29dc259	feat: parse tag filters and resolve targets as ids union tag selector	2026-08-04 13:31:04 +01:00
mrhid6	13cd41d202	feat: validate server tags and add the model field	2026-08-04 13:30:06 +01:00
mrhid6	3530ce6cb7	docs: implementation plans for server tags and scheduled workflows	2026-08-04 13:26:04 +01:00
mrhid6	09522c2566	docs: design for server tags and scheduled workflows	2026-08-04 13:13:12 +01:00
mrhid6	80f0afb28b	feat: Updated monitors pages	2026-08-04 12:19:15 +01:00
mrhid6	287bd9657b	fix: Fixed paddle relink sub	2026-08-03 17:34:39 +01:00
mrhid6	b5f684c4fe	fix: Fixed paddle subs	2026-08-03 15:32:01 +01:00
mrhid6	1f08e90009	feat: Removed email alert settings	2026-08-03 14:40:15 +01:00
mrhid6	6881d92d0a	fix: local-login toggle no longer reverts unsaved settings edits ... server/internal/services/settings.go SaveSettings takes alerts and email as required (non-pointer) values and writes them unconditionally - absent fields would blank stored settings, not just leave them alone. onLocalLoginChange was building its payload from the stale loaded settings object instead of the in-progress form state (thresholdMinutes/logRetentionDays) that handleSubmit uses, so editing the offline threshold and then flipping the toggle silently reverted the edit. Both paths now submit the same in-progress values.	2026-08-03 14:13:05 +01:00
mrhid6	5e016c6584	fix: audit ack_notice and stop misreporting DB errors as lockouts ... ackAuthProviderNotice mutated callback_notice with no audit event; it now writes auth_provider.ack_notice like create/update/delete. guardProviderChange's callers turned any error from CountEnabledAuthProviders into a 409 last_provider, so a transient Mongo error was reported to the operator as an unremovable lockout. Only services.ErrLockout now produces the 409; anything else is a 500.	2026-08-03 14:12:21 +01:00
mrhid6	537b8758ff	fix: purge auth_providers when reaping an instance ... auth_providers was missing from ScopedCollections, so reap.go's scopedCollectionsForPurge() (derived from that list) never deleted an instance's providers, leaving orphaned rows holding encrypted client secrets forever. Verified migration 0004's $rename over org_id->instance_id is a no-op here since auth_providers never carried org_id.	2026-08-03 14:11:42 +01:00
mrhid6	c03360333b	fix: single source of truth for local-login lockout rescue ... HandleLocalLogin and HandleListPublicProviders each computed their own answer to whether password sign-in must stay available, and they could disagree: an instance with local login off and a licence that lapses loses its only provider and its password form in the same moment, with no endpoint left to recover. services.LocalLoginPermitted is now the one predicate both call.	2026-08-03 14:11:22 +01:00
mrhid6	fa7c5d341d	docs: fix stale auth-provider references in rest-api and licensing docs	2026-08-03 11:08:22 +01:00
mrhid6	b6fc8c3f77	docs: document multiple auth providers and the callback URL change	2026-08-03 11:05:40 +01:00
mrhid6	37f2c1457e	feat: manage multiple sign-in providers from settings	2026-08-03 11:00:25 +01:00
mrhid6	3a626922a5	feat: render one login button per configured auth provider	2026-08-03 10:56:03 +01:00
mrhid6	dde47de145	feat: auth provider REST API and public provider discovery	2026-08-03 10:51:35 +01:00
mrhid6	f3b9f6f286	feat: add GitHub OAuth2 provider branch	2026-08-03 10:48:19 +01:00
mrhid6	f1c3f67864	feat: per-provider SSO start and callback routes	2026-08-03 10:45:23 +01:00
mrhid6	8f5873afca	refactor: carry provider id in the OIDC state token	2026-08-03 10:41:30 +01:00
mrhid6	e22faebfcd	feat: migrate instance_oidc into auth_providers (0005)	2026-08-03 10:38:52 +01:00
mrhid6	e2b01b62a5	feat: add local_login_enabled setting with absent-means-on default	2026-08-03 10:36:48 +01:00
mrhid6	0858693d57	feat: add auth provider service layer and lockout guard	2026-08-03 10:33:36 +01:00
mrhid6	45f7c0c393	feat: add AuthProvider model and identity provider presets	2026-08-03 10:30:21 +01:00
mrhid6	c56bfb7270	docs: implementation plan for multiple auth providers	2026-08-03 10:23:35 +01:00
mrhid6	eb45072031	feat: Removed unused test units	2026-08-03 10:18:01 +01:00
mrhid6	1e2132c1a1	docs: Cleanup old specs and plans	2026-08-03 10:15:54 +01:00
mrhid6	19ef773690	docs: drop legacy OIDC callback from multi-provider design	2026-08-03 10:13:26 +01:00
mrhid6	c5aae0614a	docs: design for multiple auth providers	2026-08-03 10:09:13 +01:00
mrhid6	17d97aaf52	feat: More logging for command stream	2026-07-31 17:20:35 +01:00
mrhid6	1fb9bd827f	feat: Added ping command	2026-07-31 17:10:59 +01:00
mrhid6	8699dc5b7e	fix: Renew presence on sub/pub	2026-07-31 16:58:50 +01:00
mrhid6	71240f183c	fix: Fixes to server shutdown stream	2026-07-31 16:44:47 +01:00
mrhid6	01e8b0ba44	feat: Better debugging for console	2026-07-31 16:31:19 +01:00
mrhid6	2aa4784518	feat: Better debugging for console	2026-07-31 16:13:51 +01:00
mrhid6	f611cae438	feat: Better debugging for console	2026-07-31 16:00:58 +01:00
mrhid6	1eb98ef962	feat: Better debugging for console	2026-07-31 15:51:26 +01:00
mrhid6	6f86496f10	fix: Ffixes to console	2026-07-31 15:05:21 +01:00
mrhid6	57a9b18102	fix: Guacd connection ip	2026-07-31 14:52:20 +01:00
mrhid6	36995fa62b	fix: Fixed install and update scripts	2026-07-31 12:10:32 +01:00
mrhid6	9121fc461f	fix: Fixed chart api routes for update	2026-07-31 12:03:45 +01:00
mrhid6	fc56bae5f9	chore: Bump chart version	2026-07-31 11:53:08 +01:00
mrhid6	ac75b3ef76	feat: chart deployment Type added	2026-07-31 11:52:31 +01:00
mrhid6	e6fe463216	feat: Updated for api ingress routes	2026-07-31 11:21:15 +01:00
mrhid6	8528f14ed7	feat: Added ingress to chart	2026-07-31 10:49:20 +01:00
mrhid6	df1d9658f5	fix: Chart build	2026-07-31 10:41:41 +01:00
mrhid6	9f9b384481	fix: Fixed chart version	2026-07-31 10:37:04 +01:00
mrhid6	165114471f	fix: Fixes to running on kubernetes	2026-07-31 10:34:10 +01:00
mrhid6	de78688093	feat: authenticate the server's Redis connection ... InitRedis now takes a username and password, read from REDIS_USERNAME and REDIS_PASSWORD, matching what admin has always done. Both empty keeps an unauthenticated Redis working; a password with an empty username is what a legacy requirepass instance needs, since go-redis then sends AUTH with one argument instead of two. This is what lets a Kubernetes install point at a managed Redis instead of the bundled one.	2026-07-31 09:36:31 +01:00
mrhid6	bbf9f72fd3	feat: Docker and helm charts	2026-07-31 09:28:54 +01:00
mrhid6	978b665aa6	fix: stop local relay teardown from logging a spurious proxy_failed reason ... Session.Close now closing its own accepted conn (from the prior fix wave) made net.ErrClosed on the guacd-side reader indistinguishable from a real remote failure, so a normal browser-tab close could race the handler's defer and intermittently log console.proxy_failed on a healthy session. Add a closing flag, set before Close's sync.Once body actually tears anything down, that setReason respects -- a deliberate local teardown can no longer produce or race in a failure reason, while Close's own explicit reason argument still wins normally.	2026-07-31 09:25:27 +01:00
mrhid6	1fe608f531	fix: bound and complete console relay teardown, restore proxy_failed audit ... - Arm the unclaimed-relay watchdog in NewSession rather than Serve, so an agent that never opens its ProxyStream is bounded to 10s and reports reason "agent_timeout", per the design spec's failure-mode table. - Session.Close now also closes the accepted net.Conn (stored via setConn), so ConsoleProxy.Close() is an unconditional kill of the whole relay chain instead of only closing an already-idle listener. - Emit console.proxy_failed and end the console session from a defer in consoleTunnel guarded on relay.Reason(), since guac's OnDisconnect never runs when the connect callback errors -- which is the path every relay failure this feature introduces takes. Update the two docsite troubleshooting rows to match what the audit event can now actually show.	2026-07-31 09:21:07 +01:00
mrhid6	1e1546cb60	docs: document the agent-relayed console proxy ... Every console session now rides the agent's outbound gRPC connection instead of a direct guacd-to-target dial, so it works for servers behind NAT and now requires a live agent (409 agent_offline otherwise). Documents PROXY_ADVERTISE_HOST / PROXY_LISTEN_HOST and corrects reachability claims across the docsite and CLAUDE.md.	2026-07-31 09:10:05 +01:00
mrhid6	119d8694d1	feat: Reap admin free instance license	2026-07-30 14:42:06 +01:00
mrhid6	8d43c689f5	feat: Reap admin free instance	2026-07-30 14:31:43 +01:00
mrhid6	05f10ed3c9	feat: record relay proxy_id and port in console audit events	2026-07-29 13:10:58 +01:00
mrhid6	c0bec3737b	feat: route every console session through the agent relay	2026-07-29 13:07:30 +01:00
mrhid6	59d147fe4d	feat: handle OpenProxyCmd in the agent command stream	2026-07-29 13:03:02 +01:00
mrhid6	9e38a01e3d	feat: add agent-side console relay	2026-07-29 12:59:24 +01:00
mrhid6	20a302f84a	feat: add OpenConsoleProxy service facade	2026-07-29 12:55:36 +01:00
mrhid6	ba2e263d00	fix: collapse ProxyStream auth failures into one indistinguishable response	2026-07-29 12:52:53 +01:00
mrhid6	a000703199	feat: add ProxyStream handler with scoped single-use auth	2026-07-29 12:50:20 +01:00
mrhid6	8fcda63742	fix: avoid closing proxy relay listener before validating remote source	2026-07-29 12:47:35 +01:00
mrhid6	3363ac9dad	feat: add console proxy session relay	2026-07-29 12:43:04 +01:00
mrhid6	a7e338b171	feat: add console proxy session registry	2026-07-29 12:40:22 +01:00
mrhid6	bc79daab48	feat: add ProxyStream wire types for agent-relayed console	2026-07-29 12:37:37 +01:00
mrhid6	d3d8dba3ff	docs: Implementation plan for agent-relayed console proxy	2026-07-29 12:26:16 +01:00
mrhid6	6d047e25ab	docs: Design for agent-relayed console proxy	2026-07-29 12:16:45 +01:00
mrhid6	ed4c39650c	feat: Removed hq signup page	2026-07-29 10:42:51 +01:00
mrhid6	7b8fa4a8a0	feat: Updated hq login page	2026-07-29 10:35:07 +01:00
mrhid6	8a02c35ec9	docs: Updated docs	2026-07-28 16:54:39 +01:00
mrhid6	487de34a50	docs: Updated docs	2026-07-28 16:53:42 +01:00
mrhid6	0424547dd4	docs: Updated docs	2026-07-28 16:53:38 +01:00
mrhid6	5be9ddb2e5	fix: Fixed baked api url	2026-07-28 16:18:50 +01:00
mrhid6	bc6c7cdb5a	feat: Updated docker file	2026-07-28 16:04:51 +01:00
mrhid6	f46fb7fc0e	feat: documentation site ... Docusaurus 3 docs-only site at docsite/, served statically by nginx under /docs on the marketing host. Covers getting started (self-hosted install through first server and first licence), the control plane, Vantage HQ, a reference section and operations. Wired into docker-compose.site.yml as docsite (3005:80) and into the image build workflow, rebuilding on its own directory only. Never added to the self-hosted compose file.	2026-07-28 15:46:33 +01:00
mrhid6	d9945882e5	docs: serve the documentation site under /docs on the marketing host	2026-07-28 15:22:20 +01:00
mrhid6	9db16522e3	docs: design for the documentation site	2026-07-28 15:20:07 +01:00
mrhid6	6070972f9a	chore: updated deps	2026-07-28 15:07:19 +01:00
mrhid6	31e0000306	feat: default steps are read only	2026-07-28 13:34:08 +01:00
mrhid6	26567766a9	feat: Move default steps into container	2026-07-28 13:28:43 +01:00
mrhid6	97dc6feaca	feat: Tapo platform page	2026-07-28 12:57:49 +01:00
mrhid6	f10e61cde4	feat: Updated marketing site	2026-07-28 12:46:28 +01:00
mrhid6	febe48a974	feat: Updated pricing	2026-07-28 12:31:00 +01:00
mrhid6	766dcabfde	fix: Fixes to the console focus	2026-07-28 12:02:48 +01:00
mrhid6	c9dab99271	feat: Windows agent inventory	2026-07-28 11:29:08 +01:00
mrhid6	60a4ed9aab	fix: Fixed agent msi update command	2026-07-28 10:53:06 +01:00
mrhid6	f56fc2e54d	fix: Fixed agent build	2026-07-28 10:30:29 +01:00
mrhid6	dabe6fe3aa	feat: Updated package path to match repo	2026-07-28 10:01:40 +01:00
mrhid6	a232c74990	feat: Move mail system to shared	2026-07-28 09:50:46 +01:00
mrhid6	792b7eb211	feat: Updated instance record and license blob box	2026-07-27 16:48:37 +01:00
mrhid6	8fd5eacec6	feat: Updated self hosted free plans	2026-07-27 16:26:20 +01:00
mrhid6	66140aaf58	fixes	2026-07-27 15:59:45 +01:00
mrhid6	fdfe8e8e46	fix: Fixed oidc purchase description	2026-07-27 15:26:34 +01:00
mrhid6	4ad68e3ac4	feat: Updated purchase page	2026-07-27 14:59:43 +01:00
mrhid6	0a86167c44	docs: updated docs	2026-07-27 10:57:19 +01:00
mrhid6	3537ec59dc	docs+deploy: Paddle env, webhook route, collections, CI build args, and spec status	2026-07-27 10:55:41 +01:00