Commit Graph
17030 Commits
Author SHA1 Message Date
peaklabs-dev 3842bc2442 fix(auth): rate limit by proxy-aware client ip instead of REMOTE_ADDR 2026-08-26 17:12:01 +02:00
peaklabs-dev 65a7520553 test: fix instance settings creation 2026-08-26 17:10:54 +02:00
🏔️ Peak 22ca3216e8 fix(ui): monaco editor placeholder alignment (#11514) 2026-08-26 15:27:48 +02:00
Kevin Dench 07d6c3aeeb fix(server): reset unreachable_count after successful connection check (#11417) 2026-08-26 14:53:42 +02:00
🏔️ Peak afe2cd4a8c fix(notifications): restore missing toggleEvent on Email settings component (#11512) 2026-08-26 14:50:16 +02:00
Andras Bacsai 44e4f071b1 ci(helper): enable manual workflow dispatch v4.3.11 2026-08-25 21:56:06 +02:00
Andras Bacsai 87e7a9a9c0 chore(releases): bump helper version to 1.0.16 2026-08-25 21:53:23 +02:00
Andras Bacsai fb2c9857f4 fix(proxy): clear stale Traefik branch upgrade warnings (#11496) 2026-08-25 21:41:08 +02:00
Andras Bacsai 63cbdd5c52 fix(security): preserve private key editor modal identity (#11497) 2026-08-25 20:51:59 +02:00
Andras Bacsai 45f9a33985 fix(resources): schedule stuck cleanup and delete metadata before jobs
Soft-delete API resources before dispatching cleanup jobs and run stuck-resource cleanup daily on one server.
2026-08-25 20:25:40 +02:00
Andras Bacsai 1ad85adbcf fix(resources): make cleanup scalable and deletion atomic 2026-08-25 20:16:23 +02:00
3d0caa236f fix(deployments): apply custom docker options when custom container name is set (#11479)
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com>
2026-08-25 12:27:33 +02:00
Andras Bacsai abeb839a69 fix(deployments): restore commit links in deployment logs (#11495) 2026-08-25 12:12:12 +02:00
Andras Bacsai cfca155890 fix(deployments): honor stop grace period in compose services (#11498) 2026-08-25 11:50:33 +02:00
Andras Bacsai 53117611e4 fix(teams): allow deletion with system-wide Git sources (#11500) 2026-08-25 11:28:15 +02:00
Andras Bacsai ac4f5af7c0 fix(teams): allow deletion with unused private keys (#11499) 2026-08-25 11:18:59 +02:00
Andras Bacsai c5b7f726b0 fix(security): redact dotted GitHub tokens and contain wide data tables 2026-08-25 10:30:14 +02:00
peaklabs-dev 58d074721c Merge remote-tracking branch 'origin/main' into next 2026-08-24 19:47:51 +02:00
Erick Licona Morales 2b5fd8e2ec fix(api): accept cuid for private_key_uuid on GitHub App update (#11468) 2026-08-24 19:44:56 +02:00
🏔️ Peak b48c3f97ab feat(ui): split action button into primary and secondary actions (#11409) 2026-08-24 19:41:25 +02:00
peaklabs-dev 41389a654f refactor(ui): cleanup css 2026-08-24 19:37:02 +02:00
Andras Bacsai 071ab976c2 feat(audit): add team activity tracking and audit log (#11462) 2026-08-24 18:03:15 +02:00
Andras Bacsai d9f0820a6f fix(database): restore custom PostgreSQL backup archives (#11481) 2026-08-24 16:27:45 +02:00
Andras Bacsai 3c72405efa fix(audit): restore horizontal scrolling for mobile event tables 2026-08-24 12:31:44 +02:00
Andras Bacsai 4e40a2c05b fix(audit): validate event filters and preserve suppression state
Validate audit event API pagination and filters, serialize paginated responses, and restore the prior audit-logging state after nested suppression callbacks.
2026-08-24 11:03:24 +02:00
Andras Bacsai 5f5f305569 fix(deployments): honor selected Docker image rollback tag (#11480) 2026-08-24 10:57:22 +02:00
Andras Bacsai 981163973b fix(server): distinguish proxy restart and update statuses 2026-08-24 10:52:08 +02:00
Andras Bacsai 2289de4489 fix(audit): prevent duplicate API update events
Suppress model audit logging during API application saves while preserving the explicit event, and improve audit log actor display spacing and token tooltips.
2026-08-24 10:42:04 +02:00
Andras Bacsai 57a322ba11 fix(audit): restrict sensitive fields and centralize event filtering 2026-08-24 10:05:29 +02:00
Andras Bacsai 50913dc409 fix(livewire): refresh service config after required variable updates 2026-08-24 09:45:31 +02:00
Andras Bacsai d74352f423 fix(audit): harden audit logging and admin controls
Log audit failures, redact invitation emails, exclude noisy model fields, and gate audit-log filters and pagination by admin access.
2026-08-24 09:13:20 +02:00
Andras Bacsai 5d06c226a3 feat(templates): add Obsidian LiveSync CouchDB service template
Add the Obsidian LiveSync compose template, service logo, and coverage for its configuration.
2026-08-24 09:10:19 +02:00
Andras Bacsai dbc0aa529f feat(templates): add HashiCorp Vault service template
Add Vault Compose configuration and generated service metadata with coverage for deployment settings.
2026-08-24 09:04:51 +02:00
Andras Bacsai c1f29beff1 feat(audit): expose team events and log integration actions
Add an admin-only audit-events API endpoint and restrict audit-log UI access. Record integration token and secret manager changes, key access, and references in audit events.
2026-08-24 07:56:21 +02:00
Andras Bacsai 3da7f5a5a5 fix(docker): handle commas in container label values (#11477) 2026-08-24 00:25:55 +02:00
Andras Bacsai 16352fad23 fix(proxy): restore project networks after host reboot (#11476) 2026-08-24 00:22:29 +02:00
Andras Bacsai 8726746241 Merge remote-tracking branch 'origin/next' into team-resource-audit-logging 2026-08-24 00:02:30 +02:00
Andras Bacsai 4454340b09 feat(secrets): add 3rd party secret manager providers (#11474) 2026-08-24 00:01:23 +02:00
Andras Bacsai 6d716e54d7 fix(database): preserve credentials and activity context on start
Keep raw secret values for database credentials, escape Redis passwords in startup commands, and pass user context through queued database starts.
2026-08-23 23:03:06 +02:00
Andras Bacsai f49c330d9d feat(database): queue starts and resolve credentials securely
Extract database start command execution into a shared service and job, preserving activity tracking and status events while supporting resolved secret credentials.
2026-08-23 22:33:03 +02:00
Andras Bacsai 91d4467322 feat(secrets): resolve integrations across deployments and databases
Add secret manager integration links and API support, resolve referenced credentials in database startup commands, and improve environment variable handling and filtering.
2026-08-23 21:33:00 +02:00
Andras Bacsai 4cd75e05b5 chore: remove obsolete AI lessons and task notes 2026-08-23 21:11:26 +02:00
Andras Bacsai ba179d50ac feat(secrets): add integration token and application manager APIs
Add API endpoints for creating validated secret manager tokens and configuring application secret manager settings. Suppress secret-bearing deployment command logs and redact resolved remote secrets.
2026-08-23 20:42:20 +02:00
Andras Bacsai 51461456f6 feat(secrets): resolve remote secret references at deployment
Add Doppler, Infisical, and Vault integrations with per-resource secret links, autocomplete, and deploy-time resolution for applications, services, and databases without persisting remote values.
2026-08-23 20:09:31 +02:00
Andras Bacsai c1219576cf feat(livewire): handle infrastructure request failures with toast
Add a local preview route and test coverage for proxy-style failures, suppressing raw Livewire error responses and showing a user-friendly toast after gestures.
2026-08-23 13:51:22 +02:00
Andras Bacsai 379abb2526 fix(docker): make cleanup commands idempotent (#11463) 2026-08-22 17:22:50 +02:00
Aditya Tripathi dd422e6608 fix(traffic-analytics): clear stale chart and cache dashboard 404s
- Dispatch the chart refresh event even when loadData() finds no
  overviews, so a wire:ignore'd chart flips to its no-data state
  instead of keeping stale data.
- Cache dashboard-route absence for 60s in SentinelTrafficClient so
  older Sentinel installs that 404 the dashboard endpoint aren't
  re-probed over SSH on every refresh within the same window.
- Make Pest's loadLazy() throw when no __lazyLoad trigger is found
  instead of silently testing the un-mounted placeholder.
2026-08-22 11:42:41 +00:00
Andras Bacsai 40e5fd8521 feat(audit): add team activity tracking and audit log 2026-08-22 13:18:14 +02:00
Andras Bacsai 7fd678d907 fix(previews): remove persistent volumes on deletion (#11455) 2026-08-22 13:16:44 +02:00
Aditya Tripathi 19752da6af feat(analytics): lazy-load traffic pages and batch Sentinel calls
- Mark Analytics, Dashboard\TrafficAnalytics and Project\Application\Analytics
  Livewire components #[Lazy] with skeleton placeholder() views so pages render
  instantly while Sentinel data loads in a deferred request
- Add SentinelTrafficClient::prefetchServerWide() to warm all server-wide
  endpoints in a single batched docker exec instead of ~14-15 serial SSH
  round-trips, and refactor overview/paths/breakdown URL building into shared
  helpers
- Cap per-app leaderboard overviews fetched via MAX_LEADERBOARD_APPS to bound
  requests on servers with many apps
- Add hasRequestSeries() to detect empty request charts and render a no-data
  state instead of a blank chart
- Gate ServerSetting's automatic Sentinel restart on is_sentinel_enabled so
  tuning geoip/traffic settings no longer silently enables Sentinel
- Add reusable skeleton UI components (skeleton, skeleton/table, skeleton/tiles)
  for the new placeholder views
2026-08-22 11:13:49 +00:00