This website requires JavaScript.
93baf71f2c
docs: add tasks/roadmap.md with future work sections (#72 )
2026-06-10 11:20:21 -05:00
27716af5d7
fix(packaging): convert CA key from SEC1 to PKCS#8 for Rust pm-ca parser (#71 )
2026-06-10 10:20:46 -05:00
4c1db3ebe0
fix(packaging): convert CA key from SEC1 to PKCS#8 for Rust pm-ca parser
2026-06-10 10:03:00 -05:00
f9ca15f7d9
fix(packaging): make .deb install and upgrade actually work end-to-end (#70 )
2026-06-10 09:23:03 -05:00
220e791048
fix(packaging): make .deb install and upgrade actually work end-to-end
2026-06-10 09:16:51 -05:00
583db2666a
fix: remove postinst migrations, let app handle schema via sqlx (#68 )
2026-06-09 22:39:45 -05:00
738e12c942
fix: remove postinst migrations, let app handle schema via sqlx
2026-06-09 22:14:17 -05:00
f55cfbc7a1
chore: bump version to 1.1.11 (#67 )
2026-06-09 16:06:40 -05:00
fb39a81ebc
chore: bump version to 1.1.11
2026-06-09 15:57:27 -05:00
0222b1677d
fix: run migrations as patch_manager, remove broken reassign_ownership (#66 )
2026-06-09 15:56:36 -05:00
5d9e84b999
fix: run migrations as patch_manager, remove broken reassign_ownership
2026-06-09 15:35:51 -05:00
dda2fd3b0e
chore: bump version to 1.1.10 (#65 )
2026-06-09 14:49:54 -05:00
67546ab17e
chore: bump version to 1.1.10
2026-06-09 14:11:31 -05:00
3b3e129663
fix: reassign DB object ownership to patch_manager after migrations (#64 )
2026-06-09 14:11:20 -05:00
60388c9614
fix: reassign DB object ownership to patch_manager after migrations
2026-06-09 13:51:07 -05:00
8acff754e8
chore: bump version to 1.1.9 (#63 )
2026-06-09 13:15:05 -05:00
268b01efa5
chore: bump version to 1.1.9
2026-06-09 13:05:59 -05:00
4cac290502
fix: enable services, fix config parsing, make migrations idempotent (#62 )
2026-06-09 13:04:11 -05:00
0e9230c99b
fix: enable services, fix config parsing, make migrations idempotent
2026-06-09 12:53:58 -05:00
ec41091721
ci: update actions for Node.js 24 compatibility (#61 )
2026-06-09 12:49:37 -05:00
7a896ba1ff
ci: update actions for Node.js 24 compatibility
2026-06-09 12:20:31 -05:00
26f87ebc20
chore: bump version to 1.1.8 (#60 )
2026-06-09 12:02:50 -05:00
3cb04964f9
chore: bump version to 1.1.8
2026-06-09 11:48:19 -05:00
a1a8eab41a
fix(postinst): surgical upgrade/fresh-install handling (#59 )
2026-06-09 11:47:22 -05:00
3760e98d6e
fix(postinst): surgical upgrade/fresh-install handling
2026-06-09 11:19:13 -05:00
b2ea6b1f7a
chore: bump version to 1.1.7 (#58 )
2026-06-09 09:27:34 -05:00
d2dd27c2a3
chore: bump version to 1.1.7
2026-06-09 09:11:25 -05:00
592ff6a7ee
fix(postinst): thorough audit - fix argon2 salt and verify all password generation logic (#57 )
2026-06-09 09:10:31 -05:00
4c02b778c0
fix(postinst): thorough audit - fix argon2 salt and verify all password generation logic
2026-06-09 08:42:33 -05:00
0c0f952f7f
chore: bump version to 1.1.6 (#56 )
2026-06-09 08:21:20 -05:00
edac7bfd4a
chore: bump version to 1.1.6
2026-06-09 08:11:36 -05:00
2a18276884
fix(postinst): correct argon2 -m parameter from raw KiB to log2 value (#55 )
2026-06-09 08:10:00 -05:00
b293d6631b
fix(postinst): correct argon2 -m parameter from raw KiB to log2 value
2026-06-08 22:06:23 -05:00
54763bd583
chore: bump version to 1.1.5
2026-06-08 20:16:11 -05:00
2bdbc8af5a
fix(ci): remove arm64 from Docker platforms and add timeout (#53 )
2026-06-08 20:15:13 -05:00
ed184ce0eb
fix(ci): remove arm64 from Docker platforms and add timeout
2026-06-08 20:06:58 -05:00
87bd5d2162
fix: remove duplicate version display from sidebar toolbar (#52 )
2026-06-08 17:54:25 -05:00
2fb9fabb24
fix: remove duplicate version display from sidebar toolbar
2026-06-08 17:47:16 -05:00
836d409e3b
feat: add version display to sidebar and bump to v1.1.4 (#51 )
2026-06-08 17:44:20 -05:00
89326889e4
feat: add version display to sidebar and bump to v1.1.4
2026-06-08 17:30:57 -05:00
94a9a253c6
chore: bump version to 1.1.3
2026-06-07 22:59:35 -05:00
e17b740415
fix(docker): complete Dockerfile audit - migrations, deps, openssl (#49 )
2026-06-07 22:59:32 -05:00
0effa50528
fix(docker): complete Docker build — add migrations, crate manifests, openssl
2026-06-07 22:39:35 -05:00
0d151d36b9
chore: bump version to 1.1.2 (#48 )
2026-06-07 22:08:55 -05:00
e1116e2ec0
chore: bump version to 1.1.2
2026-06-07 21:19:18 -05:00
4fbcf3d35a
fix(docker): use Ubuntu 24.04 throughout all Dockerfile stages (#47 )
2026-06-07 21:19:07 -05:00
91d8659cfe
fix: use Ubuntu 24.04 for all Docker stages instead of Debian Bookworm
2026-06-07 21:02:24 -05:00
e7c5e19d88
fix(docker): bump Rust toolchain from 1.82 to 1.85 for moxcms compatibility
2026-06-07 20:38:26 -05:00
6d4ec8c9ac
chore: bump version to 1.1.1 (#45 )
2026-06-07 20:14:45 -05:00
99529b42da
chore: bump version to 1.1.1
2026-06-07 18:55:59 -05:00
bf91b3c6d2
fix(docker): use ubuntu:24.04 runtime instead of debian:bookworm-slim (#44 )
2026-06-07 18:55:45 -05:00
b4921d51a0
fix(docker): use ubuntu:24.04 runtime instead of debian:bookworm-slim
2026-06-07 17:34:05 -05:00
455013db8e
fix(docker): add PostgreSQL APT repo for postgresql-client-16
2026-06-07 17:21:37 -05:00
2d3be0955b
chore: bump version to 1.1.0 (#43 )
2026-06-07 17:01:01 -05:00
164d5b3bf1
chore: bump version to 1.1.0
2026-06-07 16:47:03 -05:00
a5343760e1
feat: Automated install, Docker deployment, and CI Docker job (#42 )
2026-06-07 16:20:08 -05:00
9f74d2ccf2
feat: add automated install, Docker deployment, and CI Docker job
2026-06-07 15:27:07 -05:00
209480dd43
Release v1.0.0 (#41 )
2026-06-07 13:27:21 -05:00
d6f0c23dd8
fix: BusyBox-compatible timing and set -e safety in shell scripts
2026-06-07 13:01:58 -05:00
ae15404496
chore: bump version to 1.0.0
2026-06-07 12:58:53 -05:00
5fa1fef6c8
fix: remove committed private keys and add gitleaks CI
2026-06-06 13:20:52 -05:00
e6dd1b8489
test: add authz gate integration tests (closes #15 )
2026-06-06 11:18:11 -05:00
bc5bfdedd9
fix: separate authz gate 403 tests from DB-dependent tests
2026-06-06 10:59:23 -05:00
53eef4eec4
test: add authz gate integration tests (closes #15 )
2026-06-06 10:05:49 -05:00
dd6961265d
chore: bump version to 0.2.4
2026-06-06 00:04:08 -05:00
40ba483d35
fix: add ca_chain and crl_pem to EnrollmentStatusResponse
2026-06-05 23:57:23 -05:00
192ebbd47f
chore: bump version to 0.2.3
2026-06-05 23:05:41 -05:00
050439ee14
fix: add missing CRL columns to Host SQL queries and fix comma syntax
2026-06-05 22:52:59 -05:00
0b12ded1cf
chore: bump version to 0.2.2
2026-06-05 21:23:55 -05:00
0296cf9c51
fix(auth): update SQL queries to use totp_secret_encrypted instead of dropped totp_secret column
2026-06-05 21:08:00 -05:00
604b31b937
chore: bump version to 0.2.1
2026-06-05 19:41:24 -05:00
89e572faf8
fix(ca): correct not_after column name to expires_at in CRL query
2026-06-05 19:27:32 -05:00
78f5304214
chore: bump version to 0.2.0
2026-06-05 17:41:02 -05:00
8c6ddbf59e
chore: bump version to 0.2.0
2026-06-05 17:35:51 -05:00
899fd4a79a
test: add CRL integration and unit tests (PR 6 of 6)
2026-06-05 17:26:20 -05:00
5ab3532833
feat: add CRL health aggregation logic and audit events (PR 5 of 6)
2026-06-05 16:42:39 -05:00
ea8337b944
feat: add CRL health status schema and UI (PR 3 of 6)
2026-06-05 16:17:17 -05:00
5aec9e629c
feat(pki): add CRL generation, distribution endpoint, and enrollment bundle extension (#26 )
2026-06-05 12:54:14 -05:00
80ffb6b62f
feat(security): replace hardcoded admin password with in-app bootstrap (#25 )
2026-06-04 13:28:44 -05:00
fda70ecf9e
feat(jobs): add host_names to job list API and UI (#24 )
2026-06-04 12:49:53 -05:00
b9fb3427e0
fix(security): encrypt app secrets at rest with AES-256-GCM (#6 )
2026-06-03 15:08:25 -05:00
e0a9037be3
Merge pull request #20 from Draco-Lunaris/Draco-Lunaris-patch-1
2026-06-03 14:50:28 -05:00
21d734c662
Update ARCHITECTURE.md
2026-06-03 14:44:02 -05:00
5488b4fd95
Merge pull request #18 from Draco-Lunaris/license/apache-2.0
2026-06-03 11:32:22 -05:00
0208d27805
Update license to Apache 2.0 for full open source
2026-06-03 11:20:21 -05:00
88b190ac8d
fix(security): restrict auth-config mutations to Admin role (#5 )
2026-06-03 09:16:41 -05:00
f58d7a6f17
fix(security): stop embedding JWT tokens in SSO callback redirect URL (#4 ) (#14 )
2026-06-03 06:28:08 -05:00
3bdae4bcc5
fix(security): harden IP allowlist against XFF bypass and spoofing (#3 )
2026-06-02 18:06:43 -05:00
8873b2c70c
fix(security): harden enrollment PKI bundle retrieval (#12 )
2026-06-02 15:16:44 -05:00
59df98504c
Merge pull request #11 from Draco-Lunaris/issue/10-ws-origin-check
2026-06-02 10:56:02 -05:00
224248888f
docs: add authoritative repo verification and SSH_ASKPASS lessons
2026-06-02 10:46:24 -05:00
06a102bf98
style: apply cargo fmt to ws-origin-check changes
2026-06-02 10:46:05 -05:00
ed5df26140
fix(ws): add Origin allowlist to browser WebSocket upgrade (CSWSH hardening)
2026-06-02 10:45:38 -05:00
80709d48a7
Merge remote-tracking branch 'github/master'
2026-06-02 10:40:33 -05:00
f797b97282
ci: add contents:write permission and free disk space
2026-05-31 02:08:38 -05:00
8dfe137745
Merge pull request #1 from Draco-Lunaris/fix/ci-skip-doctests
2026-05-31 01:47:25 -05:00
28edce0fc6
ci: skip doctests to avoid missing certs dependency
2026-05-31 01:08:50 -05:00
0f0a534f25
docs: add CONTRIBUTING.md and SECURITY.md for open source
2026-05-31 00:12:14 -05:00
f557e21e09
ci: add GitHub Actions CI/CD and Apache-2.0 license
2026-05-31 00:10:01 -05:00
d2d7132955
chore: add certs/ to .gitignore
2026-05-30 22:50:12 -05:00
Draco-Lunaris-Echo