|
|
ec739975ec
|
fix: add 2s delay between per-domain lego runs
|
2026-07-07 17:54:09 +01:00 |
|
|
|
8b2301f3a4
|
fix: request individual certs per domain instead of SAN cert
|
2026-07-07 17:53:48 +01:00 |
|
|
|
93f853bd40
|
fix: 12-char password, cert upload API with CSRF retry
|
2026-07-07 17:17:00 +01:00 |
|
|
|
47d66f476d
|
fix: alphanumeric password only (no special chars), safe for .env and systemd
|
2026-07-07 17:11:58 +01:00 |
|
|
|
585d4e6ec8
|
fix: install.sh no presets, random password, copies local code instead of cloning
|
2026-07-07 17:06:54 +01:00 |
|
|
|
e03cb76017
|
fix: write BoltDB before Zoraxy starts (db not locked) + remove duplicate
|
2026-07-07 16:47:27 +01:00 |
|
|
|
fa9537bcb5
|
fix: longer wait for sys.db, fallback to touch + userCount check
|
2026-07-07 16:33:49 +01:00 |
|
|
|
c42807d076
|
refactor: configure Zoraxy via BoltDB + config files, no API/CSRF
|
2026-07-07 16:19:34 +01:00 |
|
|
|
90c8c57fbe
|
debug: show login.html response when CSRF fetch fails
|
2026-07-07 16:12:30 +01:00 |
|
|
|
b1004e4514
|
fix: BoltDB fallback for admin creation if CSRF API fails
|
2026-07-07 16:12:05 +01:00 |
|
|
|
fd1fa7dbeb
|
fix: CSRF token — clear jar before first fetch, preserve session across calls
|
2026-07-07 16:08:20 +01:00 |
|
|
|
710781bc47
|
fix: surface admin registration result instead of swallowing it
|
2026-07-07 16:05:31 +01:00 |
|
|
|
b2e3086e10
|
fix: upload existing LE certs to Zoraxy via API after deploy
|
2026-07-07 15:51:25 +01:00 |
|
|
|
13c1bd2d13
|
fix: set lego path to /opt/backup to avoid double certificates/ nesting
|
2026-07-07 15:36:23 +01:00 |
|
|
|
5f46d3c2b8
|
refactor: rename backup dir to /opt/backup/certificates/
|
2026-07-07 15:33:22 +01:00 |
|
|
|
6d87718b43
|
refactor: lego outputs to /opt/backup/certs/, one backup directory
|
2026-07-07 15:27:30 +01:00 |
|
|
|
c7d25c0107
|
fix: fallback to lego SAN cert directory if backup missing
|
2026-07-07 15:24:03 +01:00 |
|
|
|
881b94099c
|
fix: handle SAN certs from lego, check both backup and lego cache
|
2026-07-07 15:23:40 +01:00 |
|
|
|
1eb470fa12
|
fix: lego v5 flags — use --http.address, -m for email, -d for domains
|
2026-07-07 15:14:46 +01:00 |
|
|
|
d144fcdc28
|
fix: lego v5 = syntax for flags
|
2026-07-07 15:14:13 +01:00 |
|
|
|
fbbf1732b3
|
fix: lego v5 arg order (flags after run command)
|
2026-07-07 15:12:58 +01:00 |
|
|
|
5aca6025c5
|
chore: remove committed binary, add to gitignore
|
2026-07-07 15:05:59 +01:00 |
|
|
|
5f168d21f1
|
feat: replace autocert with lego CLI for reliable LE cert issuance
|
2026-07-07 15:05:41 +01:00 |
|
|
|
02bab22a5d
|
fix: build tool from script directory (correct go.mod context)
|
2026-07-07 14:57:30 +01:00 |
|
|
|
533b6f4137
|
fix: full service teardown (stop+disable+remove) + port 80 wait
|
2026-07-07 14:53:00 +01:00 |
|
|
|
434b23aee2
|
fix: tool detects LE vs self-signed, retries LE for fallback certs
|
2026-07-07 14:45:45 +01:00 |
|
|
|
63099703a1
|
fix: stop Zoraxy before running tool to free port 80 for ACME
|
2026-07-07 14:44:13 +01:00 |
|
|
|
360112c7b7
|
fix: remove old zoraxy container before deploying
|
2026-07-07 14:33:28 +01:00 |
|
|
|
2e7a0e3645
|
refactor: /opt/backup/ vault for .env + certs, clean destroy flow
|
2026-07-07 14:30:48 +01:00 |
|
|
|
b0a3cd3206
|
fix: tool only manages backup, preservation handles cert deployment
|
2026-07-07 14:14:36 +01:00 |
|
|
|
25c0e7b9b7
|
docs: remove --destroy blocker — tool handles cert backup/restore
|
2026-07-07 12:57:58 +01:00 |
|
|
|
2398bdce83
|
feat: nextwks-tool for LE + DB + Zoraxy Auth
|
2026-07-07 12:53:57 +01:00 |
|
|
|
d73b67614e
|
fix: proxy www through binary for ACME challenge support
|
2026-07-07 12:22:11 +01:00 |
|
|
|
038d923a11
|
fix: include www in LE cert auto-generation loop
|
2026-07-07 12:19:17 +01:00 |
|
|
|
4e50bf15dd
|
fix: www files go to html/ subdirectory (Zoraxy static root)
|
2026-07-07 12:13:06 +01:00 |
|
|
|
ddef538795
|
feat: www landing page with component listing
|
2026-07-07 12:09:25 +01:00 |
|
|
|
7b3942658d
|
docs: add 5s safety warning before --destroy
|
2026-07-07 12:06:12 +01:00 |
|
|
|
79bf23618d
|
fix: proper Zoraxy CSRF/session handling (login.html + cookie jar)
|
2026-07-07 12:02:59 +01:00 |
|
|
|
d0f9854084
|
fix: bypass global TLS for dns subdomain (HTTP without redirect)
|
2026-07-07 11:04:12 +01:00 |
|
|
|
ccd362a964
|
fix: hoist COOKIE_JAR outside function to avoid unbound variable
|
2026-07-07 10:56:17 +01:00 |
|
|
|
acd9671359
|
fix: preserve Zoraxy certs across greenfield destroy
|
2026-07-07 10:52:16 +01:00 |
|
|
|
eabbcdaa2d
|
fix: request LE certs for all subdomains (app + dns) on greenfield
|
2026-07-07 10:47:38 +01:00 |
|
|
|
22471e479b
|
fix: unlock immutable files before destroy, timeout LE cert request
|
2026-07-07 10:34:36 +01:00 |
|
|
|
8ee09fb229
|
chore: version 0.1.0 with changelog
|
2026-07-07 10:29:59 +01:00 |
|
|
|
d2fa6c7365
|
fix: robust Zoraxy admin creation + LE automation with proper CSRF
|
2026-07-07 10:21:24 +01:00 |
|
|
|
47efc2e62d
|
fix: lock Zoraxy proxy configs with immutable flag (chattr +i)
|
2026-07-07 09:56:39 +01:00 |
|
|
|
4416f15797
|
fix: Zoraxy config expansion — use full schema with origin IP
|
2026-07-07 09:53:29 +01:00 |
|
|
|
f9b1b3aa7b
|
fix: preserve .env across greenfield destroy
|
2026-07-07 09:16:12 +01:00 |
|
|
|
8366164155
|
fix: restore dns config, Zoraxy admin, LE automation
|
2026-07-07 09:13:07 +01:00 |
|
|
|
49ac348694
|
feat: combined launcher + auth-proxy with path-based routing
|
2026-07-06 20:58:33 +01:00 |
|
