897275c659
fix: subdomain-based certs only, unknown subdomains return error
2026-07-06 15:52:51 +01:00
672653f731
feat: deploy modes (--destroy) + HTTPS with Let's Encrypt
2026-07-06 15:45:23 +01:00
29b9f3c159
feat(deploy): add --destroy flag and smart update modes
2026-07-06 15:36:48 +01:00
cd15d294a1
feat: subdomain router with certmagic integration
2026-07-06 15:25:21 +01:00
2d3832df0b
feat: hello world pipeline proof
2026-07-06 10:28:20 +01:00
937250fa28
fix: serve greeting at root when Authelia is not deployed
...
- Root handler now serves the greeting boilerplate for all paths
- Auth gate (combinedAuth) preserved but suppressed for now
- When Authelia is deployed, re-enable by switching launcher handler
- Makes the app testable without its auth dependency
2026-07-06 09:20:12 +01:00
032c07beef
fix(proxy): auth middleware only for exact /, unmatched paths get greeting
...
- Move combinedAuth inside the launcher handler path check
- Unmatched proxy paths (not exactly /) now correctly serve NotFoundHandler greeting
- Root / remains auth-gated as intended
2026-07-06 09:08:25 +01:00
e575b4eeb0
feat: self-signed TLS fallback on :443 + proxy as central router
...
- Add CertFile/KeyFile fields to TLSConfig (config.go)
- File-based TLS fallback: when cert_file+key_file set, ListenAndServeTLS on :443
while keeping HTTP on configured port (certmagic ACME is non-fallback path)
- deploy.sh: enable TLS by default, generate self-signed cert during deploy
- deploy.sh: change default port 8080 → 80 (reverse proxy standard)
- deploy.sh: add cert_file/key_file to config template
- proxy as central router fix (handler.go: ServeHTTP + StaticHandler methods)
2026-07-06 08:59:12 +01:00
b069cab1e3
fix(deploy): default server port to 80 (reverse proxy standard)
...
- Change config template in deploy.sh from port 8080 to port 80
- A reverse proxy must listen on port 80 for public HTTP traffic
- CAP_NET_BIND_SERVICE allows non-root binding to low ports
2026-07-06 08:54:58 +01:00
1a7c99988b
fix(install): align install path to /opt/nextworkspace/ (blueprint-compliant)
...
- Fix INSTALL_DIR in install.sh: /opt/nextwks → /opt/nextworkspace/
- All deployment scripts now consistently use /opt/nextworkspace/
2026-07-06 07:50:02 +01:00
1efeb05f4f
deploy: production deploy script + path alignment to /opt/nextworkspace/
...
- Add deploy.sh: idempotent production deploy (scaffold, build, systemd, health check)
- Fix update.sh: align all paths from /opt/nextwks/ to /opt/nextworkspace/ (blueprint-compliant)
- deploy.sh safe for first-time setup and subsequent updates
- Creates full blueprint directory tree: config/, data/, logs/, src/core/
2026-07-05 18:19:33 +01:00
3560e9b5b6
chore: remove unwanted files
2026-07-05 10:06:22 +01:00
b8db1f87f8
fix(auth): state carries target URL, cross-subdomain cookie domain
2026-06-15 20:18:26 +00:00
94258749dc
fix(auth): admin redirects to OIDC login when no session
2026-06-15 20:15:12 +00:00
bcfe28b16b
chore: bump version to 2026.6.0007
2026-06-15 20:10:53 +00:00
43b32cc881
feat(auth): /access callback, nextwks.eu cookie domain
2026-06-15 20:06:34 +00:00
7d432d0af5
fix(apps): all tiles clickable, open in new tab
2026-06-15 20:01:10 +00:00
151ddc6f63
fix(apps): 4 tiles clickable (Admin + WorkSheets/TypeWriter/DeckCreator/NotesFiles)
2026-06-15 19:53:37 +00:00
5eb5399088
fix(apps): simple onclick with data-url, all tiles clickable
2026-06-15 19:42:10 +00:00
445c49e77c
fix(apps): data-url onclick for tiles
2026-06-15 19:41:27 +00:00
29782180d9
feat(apps): auto-register app routes from DefaultApps
2026-06-15 19:34:36 +00:00
c24bdc4305
feat(apps): split Office into WorkSheets, TypeWriter, DeckCreator, NotesFiles
2026-06-15 19:33:51 +00:00
7c13808527
feat(apps): placeholder app pages for files, mail, calendar, office, contacts, tasks, chat
2026-06-15 19:12:36 +00:00
dd1e963357
chore: bump version to 2026.6.0006
2026-06-15 09:51:58 +00:00
a8172324b7
feat(proxy): NextWks proxies /auth/* to Authelia internally
2026-06-15 09:49:53 +00:00
95308c880b
refactor(auth): single-domain setup, remove cross-domain cookie hackery
2026-06-15 09:27:34 +00:00
9f7e4c8a68
fix(auth): close div tag in logout template
2026-06-15 09:17:52 +00:00
b3d015a26a
fix(authelia): bypass access control for /auth/logout to allow redirect
2026-06-15 09:08:23 +00:00
917dbb0844
feat(auth): logout via Authelia with redirect back to confirmation page
2026-06-15 08:32:26 +00:00
312aa388d4
feat(auth): custom logout page with Authelia sign-out and re-login button
2026-06-15 08:24:13 +00:00
594cf3efe2
fix(auth): only clear NextWks cookie on logout, cant cross-domain
2026-06-15 08:19:44 +00:00
d0dbe9b472
feat(auth): kill Authelia session cookie on logout
2026-06-15 08:15:57 +00:00
00a252b2e9
fix(auth): simple logout - clear cookie, redirect to workspace
2026-06-15 08:14:04 +00:00
6bec565b7a
feat(auth): force re-login after logout via prompt=login
2026-06-15 08:12:32 +00:00
49c4254594
fix(auth): logout redirects to workspace, which redirects to Authelia login
2026-06-15 08:10:35 +00:00
2489ac589e
fix(auth): force re-login via prompt=login for proper logout
2026-06-15 08:07:54 +00:00
bc7d546e64
fix(auth): redirect back to workspace after Authelia logout
2026-06-15 08:02:49 +00:00
b5ed7e2364
fix(auth): change SameSite to Lax for redirect compatibility
2026-06-15 07:08:24 +00:00
44fec75b42
fix(auth): redirect to Authelia /logout instead of end-session
2026-06-15 06:48:03 +00:00
8b2ab0c776
fix(auth): proper logout with domain cookie and Authelia end-session
2026-06-15 06:46:10 +00:00
2200ff657a
fix(auth): set cookie domain for cross-subdomain OIDC flow
2026-06-15 06:44:10 +00:00
3b3cc7baa4
feat(email): SMTP welcome email on user creation
2026-06-15 06:38:11 +00:00
8bbdaf54ac
feat(ui): show success message on user/group save, auto-refresh list
2026-06-15 06:35:02 +00:00
ecb3cbe442
fix(update): only wipe DB with --wipe-db flag, preserve data by default
2026-06-15 06:24:39 +00:00
8eca6d0ed4
feat(users): tag-style group selector with chips for user edit/create
2026-06-15 06:15:01 +00:00
19f1cf2c2b
feat(users): edit form with role/group edit, delete on edit page
2026-06-15 06:04:58 +00:00
f193765dad
feat(users): group checkboxes in create form, edit buttons, role dropdown
2026-06-15 05:59:35 +00:00
0e707cdae6
feat(groups): edit form with description update, delete on edit page
2026-06-15 05:52:13 +00:00
39b37c704e
refactor(groups): remove app selection from group form, App→Group model later
2026-06-15 05:46:29 +00:00
ac72c77a85
feat(groups): add edit button placeholder to group rows
2026-06-15 05:43:50 +00:00
