fc93201313
install mode: detect existing install and deflect to --update or --destroy
2026-07-11 08:57:36 +01:00
3df375e047
refuse to run under sudo, update README/AGENT.md to match
2026-07-11 08:47:54 +01:00
b060e23a1d
add tools/firewall-routing.sh, fix .env Permission denied, apply firewall from cloned repo
2026-07-11 08:42:19 +01:00
e92382266f
rootless podman: ports 8080/8443, iptables redirect 80→8080 443→8443, no sudo for podman
2026-07-11 00:38:24 +01:00
3ca19403fa
nextwks.sh: replace full root escalation with per-command sudo, files owned by user
2026-07-11 00:34:21 +01:00
d41d1443a8
fix launcher health check: install curl in alpine, update script + applySettings path
2026-07-11 00:28:44 +01:00
89ea56e255
nextwks.sh: chown target dirs to non-root user after deploy
2026-07-11 00:23:52 +01:00
1b24799026
nextwks.sh: add IMAP prompts, stop old containers in all modes, port conflict check, health check diagnostics
2026-07-11 00:21:21 +01:00
2999f5da47
nextwks.sh: fix SIGPIPE crash on password gen and Go version fetch under pipefail
2026-07-11 00:17:07 +01:00
d23b6c2909
nextwks.sh: auto-escalate to root via sudo instead of erroring out
2026-07-11 00:14:55 +01:00
6e95c088e4
nextwks.sh: add root check with clear error message
2026-07-11 00:13:01 +01:00
81e5505f2a
Unified install/update/destroy script with ephemeral build dir
...
- Replace deploy.sh and install.sh with tools/nextwks.sh
- Build in /tmp/nextwks-build (fresh clone every time), no more /opt/NextWks
- Script saves itself to ~/nextwks.sh on --install for easy future access
- Add AGENT.md with workflow rules for the new approach
- Secrets persisted in /opt/backup/.env (JWT, SESSION, password hash)
- Update README and CHANGELOG
2026-07-11 00:02:55 +01:00
594683dbf8
feat: RBAC with Authelia groups + filtered launcher + admin panel
2026-07-08 13:46:02 +01:00
a287a67fd1
feat: Caddy + Authelia replace Zoraxy
2026-07-08 09:54:39 +01:00
e52b7e6915
fix: CSRF extraction looks for specific zoraxy.csrf.Token
2026-07-08 09:28:54 +01:00
b948399d1d
fix: cert upload uses multipart/form-data with cert+key+domain
2026-07-08 09:09:11 +01:00
d420f179a2
chore: remove committed binary, add to gitignore
2026-07-08 08:51:31 +01:00
aa29d363ce
fix: use Go tool for cert upload, fix apps.yaml YAML format
2026-07-08 08:51:23 +01:00
efaa917013
feat: LE_DRY_RUN=true skips LE, generates self-signed
2026-07-07 18:20:21 +01:00
a3b31ed2ab
fix: reduce lego timeout to 30s
2026-07-07 18:11:59 +01:00
1705d1e32d
fix: 60s lego timeout, stop on first failure, fall back to self-signed
2026-07-07 18:06:14 +01:00
ec739975ec
fix: add 2s delay between per-domain lego runs
2026-07-07 17:54:09 +01:00
8b2301f3a4
fix: request individual certs per domain instead of SAN cert
2026-07-07 17:53:48 +01:00
13c1bd2d13
fix: set lego path to /opt/backup to avoid double certificates/ nesting
2026-07-07 15:36:23 +01:00
5f46d3c2b8
refactor: rename backup dir to /opt/backup/certificates/
2026-07-07 15:33:22 +01:00
6d87718b43
refactor: lego outputs to /opt/backup/certs/, one backup directory
2026-07-07 15:27:30 +01:00
881b94099c
fix: handle SAN certs from lego, check both backup and lego cache
2026-07-07 15:23:40 +01:00
1eb470fa12
fix: lego v5 flags — use --http.address, -m for email, -d for domains
2026-07-07 15:14:46 +01:00
d144fcdc28
fix: lego v5 = syntax for flags
2026-07-07 15:14:13 +01:00
fbbf1732b3
fix: lego v5 arg order (flags after run command)
2026-07-07 15:12:58 +01:00
5aca6025c5
chore: remove committed binary, add to gitignore
2026-07-07 15:05:59 +01:00
5f168d21f1
feat: replace autocert with lego CLI for reliable LE cert issuance
2026-07-07 15:05:41 +01:00
434b23aee2
fix: tool detects LE vs self-signed, retries LE for fallback certs
2026-07-07 14:45:45 +01:00
2e7a0e3645
refactor: /opt/backup/ vault for .env + certs, clean destroy flow
2026-07-07 14:30:48 +01:00
2398bdce83
feat: nextwks-tool for LE + DB + Zoraxy Auth
2026-07-07 12:53:57 +01:00
49ac348694
feat: combined launcher + auth-proxy with path-based routing
2026-07-06 20:58:33 +01:00
c54c01d609
fix: write SSO redirect URL directly to BoltDB
2026-07-06 19:55:10 +01:00
