Commit graph

234 commits

Author SHA1 Message Date
b2e3086e10 fix: upload existing LE certs to Zoraxy via API after deploy 2026-07-07 15:51:25 +01:00
13c1bd2d13 fix: set lego path to /opt/backup to avoid double certificates/ nesting 2026-07-07 15:36:23 +01:00
5f46d3c2b8 refactor: rename backup dir to /opt/backup/certificates/ 2026-07-07 15:33:22 +01:00
6d87718b43 refactor: lego outputs to /opt/backup/certs/, one backup directory 2026-07-07 15:27:30 +01:00
c7d25c0107 fix: fallback to lego SAN cert directory if backup missing 2026-07-07 15:24:03 +01:00
881b94099c fix: handle SAN certs from lego, check both backup and lego cache 2026-07-07 15:23:40 +01:00
1eb470fa12 fix: lego v5 flags — use --http.address, -m for email, -d for domains 2026-07-07 15:14:46 +01:00
d144fcdc28 fix: lego v5 = syntax for flags 2026-07-07 15:14:13 +01:00
fbbf1732b3 fix: lego v5 arg order (flags after run command) 2026-07-07 15:12:58 +01:00
5aca6025c5 chore: remove committed binary, add to gitignore 2026-07-07 15:05:59 +01:00
5f168d21f1 feat: replace autocert with lego CLI for reliable LE cert issuance 2026-07-07 15:05:41 +01:00
02bab22a5d fix: build tool from script directory (correct go.mod context) 2026-07-07 14:57:30 +01:00
533b6f4137 fix: full service teardown (stop+disable+remove) + port 80 wait 2026-07-07 14:53:00 +01:00
434b23aee2 fix: tool detects LE vs self-signed, retries LE for fallback certs 2026-07-07 14:45:45 +01:00
63099703a1 fix: stop Zoraxy before running tool to free port 80 for ACME 2026-07-07 14:44:13 +01:00
360112c7b7 fix: remove old zoraxy container before deploying 2026-07-07 14:33:28 +01:00
2e7a0e3645 refactor: /opt/backup/ vault for .env + certs, clean destroy flow 2026-07-07 14:30:48 +01:00
b0a3cd3206 fix: tool only manages backup, preservation handles cert deployment 2026-07-07 14:14:36 +01:00
25c0e7b9b7 docs: remove --destroy blocker — tool handles cert backup/restore 2026-07-07 12:57:58 +01:00
2398bdce83 feat: nextwks-tool for LE + DB + Zoraxy Auth 2026-07-07 12:53:57 +01:00
d73b67614e fix: proxy www through binary for ACME challenge support 2026-07-07 12:22:11 +01:00
038d923a11 fix: include www in LE cert auto-generation loop 2026-07-07 12:19:17 +01:00
4e50bf15dd fix: www files go to html/ subdirectory (Zoraxy static root) 2026-07-07 12:13:06 +01:00
ddef538795 feat: www landing page with component listing 2026-07-07 12:09:25 +01:00
7b3942658d docs: add 5s safety warning before --destroy 2026-07-07 12:06:12 +01:00
79bf23618d fix: proper Zoraxy CSRF/session handling (login.html + cookie jar) 2026-07-07 12:02:59 +01:00
d0f9854084 fix: bypass global TLS for dns subdomain (HTTP without redirect) 2026-07-07 11:04:12 +01:00
ccd362a964 fix: hoist COOKIE_JAR outside function to avoid unbound variable 2026-07-07 10:56:17 +01:00
acd9671359 fix: preserve Zoraxy certs across greenfield destroy 2026-07-07 10:52:16 +01:00
eabbcdaa2d fix: request LE certs for all subdomains (app + dns) on greenfield 2026-07-07 10:47:38 +01:00
22471e479b fix: unlock immutable files before destroy, timeout LE cert request 2026-07-07 10:34:36 +01:00
8ee09fb229 chore: version 0.1.0 with changelog 2026-07-07 10:29:59 +01:00
d2fa6c7365 fix: robust Zoraxy admin creation + LE automation with proper CSRF 2026-07-07 10:21:24 +01:00
47efc2e62d fix: lock Zoraxy proxy configs with immutable flag (chattr +i) 2026-07-07 09:56:39 +01:00
4416f15797 fix: Zoraxy config expansion — use full schema with origin IP 2026-07-07 09:53:29 +01:00
f9b1b3aa7b fix: preserve .env across greenfield destroy 2026-07-07 09:16:12 +01:00
8366164155 fix: restore dns config, Zoraxy admin, LE automation 2026-07-07 09:13:07 +01:00
49ac348694 feat: combined launcher + auth-proxy with path-based routing 2026-07-06 20:58:33 +01:00
c54c01d609 fix: write SSO redirect URL directly to BoltDB 2026-07-06 19:55:10 +01:00
9bc8310db1 fix: CSRF token handling with follow redirects and cookie jar 2026-07-06 19:04:39 +01:00
57defd7a63 feat: automated LE + ZorxAuth SSO via deploy API 2026-07-06 18:57:12 +01:00
91232a7beb fix: dns.nextwks.eu use AuthMethod 0 (no SSO) 2026-07-06 18:12:51 +01:00
7a4328040b feat: interactive install, .env secrets, Zoraxy admin API 2026-07-06 18:06:09 +01:00
2798485a2c fix: Zoraxy config path (conf/proxy/), origin IP, filename 2026-07-06 16:57:34 +01:00
7fdf6692df feat: Zoraxy proxy + launcher rewrite 2026-07-06 16:49:57 +01:00
811c0c75f7 feat(install): add podman to system deps 2026-07-06 15:57:48 +01:00
897275c659 fix: subdomain-based certs only, unknown subdomains return error 2026-07-06 15:52:51 +01:00
672653f731 feat: deploy modes (--destroy) + HTTPS with Let's Encrypt 2026-07-06 15:45:23 +01:00
29b9f3c159 feat(deploy): add --destroy flag and smart update modes 2026-07-06 15:36:48 +01:00
cd15d294a1 feat: subdomain router with certmagic integration 2026-07-06 15:25:21 +01:00