2398bdce83
feat: nextwks-tool for LE + DB + Zoraxy Auth
2026-07-07 12:53:57 +01:00
d73b67614e
fix: proxy www through binary for ACME challenge support
2026-07-07 12:22:11 +01:00
038d923a11
fix: include www in LE cert auto-generation loop
2026-07-07 12:19:17 +01:00
4e50bf15dd
fix: www files go to html/ subdirectory (Zoraxy static root)
2026-07-07 12:13:06 +01:00
ddef538795
feat: www landing page with component listing
2026-07-07 12:09:25 +01:00
7b3942658d
docs: add 5s safety warning before --destroy
2026-07-07 12:06:12 +01:00
79bf23618d
fix: proper Zoraxy CSRF/session handling (login.html + cookie jar)
2026-07-07 12:02:59 +01:00
d0f9854084
fix: bypass global TLS for dns subdomain (HTTP without redirect)
2026-07-07 11:04:12 +01:00
ccd362a964
fix: hoist COOKIE_JAR outside function to avoid unbound variable
2026-07-07 10:56:17 +01:00
acd9671359
fix: preserve Zoraxy certs across greenfield destroy
2026-07-07 10:52:16 +01:00
eabbcdaa2d
fix: request LE certs for all subdomains (app + dns) on greenfield
2026-07-07 10:47:38 +01:00
22471e479b
fix: unlock immutable files before destroy, timeout LE cert request
2026-07-07 10:34:36 +01:00
8ee09fb229
chore: version 0.1.0 with changelog
2026-07-07 10:29:59 +01:00
d2fa6c7365
fix: robust Zoraxy admin creation + LE automation with proper CSRF
2026-07-07 10:21:24 +01:00
47efc2e62d
fix: lock Zoraxy proxy configs with immutable flag (chattr +i)
2026-07-07 09:56:39 +01:00
4416f15797
fix: Zoraxy config expansion — use full schema with origin IP
2026-07-07 09:53:29 +01:00
f9b1b3aa7b
fix: preserve .env across greenfield destroy
2026-07-07 09:16:12 +01:00
8366164155
fix: restore dns config, Zoraxy admin, LE automation
2026-07-07 09:13:07 +01:00
49ac348694
feat: combined launcher + auth-proxy with path-based routing
2026-07-06 20:58:33 +01:00
c54c01d609
fix: write SSO redirect URL directly to BoltDB
2026-07-06 19:55:10 +01:00
9bc8310db1
fix: CSRF token handling with follow redirects and cookie jar
2026-07-06 19:04:39 +01:00
57defd7a63
feat: automated LE + ZorxAuth SSO via deploy API
2026-07-06 18:57:12 +01:00
91232a7beb
fix: dns.nextwks.eu use AuthMethod 0 (no SSO)
2026-07-06 18:12:51 +01:00
7a4328040b
feat: interactive install, .env secrets, Zoraxy admin API
2026-07-06 18:06:09 +01:00
2798485a2c
fix: Zoraxy config path (conf/proxy/), origin IP, filename
2026-07-06 16:57:34 +01:00
7fdf6692df
feat: Zoraxy proxy + launcher rewrite
2026-07-06 16:49:57 +01:00
811c0c75f7
feat(install): add podman to system deps
2026-07-06 15:57:48 +01:00
897275c659
fix: subdomain-based certs only, unknown subdomains return error
2026-07-06 15:52:51 +01:00
672653f731
feat: deploy modes (--destroy) + HTTPS with Let's Encrypt
2026-07-06 15:45:23 +01:00
29b9f3c159
feat(deploy): add --destroy flag and smart update modes
2026-07-06 15:36:48 +01:00
cd15d294a1
feat: subdomain router with certmagic integration
2026-07-06 15:25:21 +01:00
2d3832df0b
feat: hello world pipeline proof
2026-07-06 10:28:20 +01:00
937250fa28
fix: serve greeting at root when Authelia is not deployed
...
- Root handler now serves the greeting boilerplate for all paths
- Auth gate (combinedAuth) preserved but suppressed for now
- When Authelia is deployed, re-enable by switching launcher handler
- Makes the app testable without its auth dependency
2026-07-06 09:20:12 +01:00
032c07beef
fix(proxy): auth middleware only for exact /, unmatched paths get greeting
...
- Move combinedAuth inside the launcher handler path check
- Unmatched proxy paths (not exactly /) now correctly serve NotFoundHandler greeting
- Root / remains auth-gated as intended
2026-07-06 09:08:25 +01:00
e575b4eeb0
feat: self-signed TLS fallback on :443 + proxy as central router
...
- Add CertFile/KeyFile fields to TLSConfig (config.go)
- File-based TLS fallback: when cert_file+key_file set, ListenAndServeTLS on :443
while keeping HTTP on configured port (certmagic ACME is non-fallback path)
- deploy.sh: enable TLS by default, generate self-signed cert during deploy
- deploy.sh: change default port 8080 → 80 (reverse proxy standard)
- deploy.sh: add cert_file/key_file to config template
- proxy as central router fix (handler.go: ServeHTTP + StaticHandler methods)
2026-07-06 08:59:12 +01:00
b069cab1e3
fix(deploy): default server port to 80 (reverse proxy standard)
...
- Change config template in deploy.sh from port 8080 to port 80
- A reverse proxy must listen on port 80 for public HTTP traffic
- CAP_NET_BIND_SERVICE allows non-root binding to low ports
2026-07-06 08:54:58 +01:00
1a7c99988b
fix(install): align install path to /opt/nextworkspace/ (blueprint-compliant)
...
- Fix INSTALL_DIR in install.sh: /opt/nextwks → /opt/nextworkspace/
- All deployment scripts now consistently use /opt/nextworkspace/
2026-07-06 07:50:02 +01:00
1efeb05f4f
deploy: production deploy script + path alignment to /opt/nextworkspace/
...
- Add deploy.sh: idempotent production deploy (scaffold, build, systemd, health check)
- Fix update.sh: align all paths from /opt/nextwks/ to /opt/nextworkspace/ (blueprint-compliant)
- deploy.sh safe for first-time setup and subsequent updates
- Creates full blueprint directory tree: config/, data/, logs/, src/core/
2026-07-05 18:19:33 +01:00
3560e9b5b6
chore: remove unwanted files
2026-07-05 10:06:22 +01:00
b8db1f87f8
fix(auth): state carries target URL, cross-subdomain cookie domain
2026-06-15 20:18:26 +00:00
94258749dc
fix(auth): admin redirects to OIDC login when no session
2026-06-15 20:15:12 +00:00
bcfe28b16b
chore: bump version to 2026.6.0007
2026-06-15 20:10:53 +00:00
43b32cc881
feat(auth): /access callback, nextwks.eu cookie domain
2026-06-15 20:06:34 +00:00
7d432d0af5
fix(apps): all tiles clickable, open in new tab
2026-06-15 20:01:10 +00:00
151ddc6f63
fix(apps): 4 tiles clickable (Admin + WorkSheets/TypeWriter/DeckCreator/NotesFiles)
2026-06-15 19:53:37 +00:00
5eb5399088
fix(apps): simple onclick with data-url, all tiles clickable
2026-06-15 19:42:10 +00:00
445c49e77c
fix(apps): data-url onclick for tiles
2026-06-15 19:41:27 +00:00
29782180d9
feat(apps): auto-register app routes from DefaultApps
2026-06-15 19:34:36 +00:00
c24bdc4305
feat(apps): split Office into WorkSheets, TypeWriter, DeckCreator, NotesFiles
2026-06-15 19:33:51 +00:00
7c13808527
feat(apps): placeholder app pages for files, mail, calendar, office, contacts, tasks, chat
2026-06-15 19:12:36 +00:00
