5cff118d0c
feat: MFA enforcement - blocking overlay after email save until TFA is set up
2026-07-12 07:55:25 +01:00
44326c542d
feat: MFA prompt in user settings page
2026-07-12 07:29:36 +01:00
48cda41d69
fix: add 1.5s delay between delete and recreate to avoid SQLITE_BUSY
2026-07-11 23:04:11 +01:00
6cf084b931
feat: edit user groups + email via delete+recreate
2026-07-11 22:55:08 +01:00
359a0dccb6
remove domain fallback defaults - domain must be explicitly configured
2026-07-11 22:13:47 +01:00
ae9b0b7a81
revert sender to SMTP_USER (post@nextwks.eu) - SMTP requires sender=login user
2026-07-11 22:10:36 +01:00
aa1be0d4cd
fix: sender should be TLS_EMAIL (dns@nextwks.eu) not SMTP_USER
2026-07-11 22:07:26 +01:00
b32180c268
modernize Authelia config to v4.39 format, add watch:true
2026-07-11 22:01:08 +01:00
d82b1a9a6b
fix: add watch:true to Authelia config so new users auto-reload
2026-07-11 21:55:10 +01:00
03ae910b3f
refactor: groups simplified to users + admins only
2026-07-11 21:39:45 +01:00
1849c65c68
fix apiProxyHandler: stop stripping /api prefix, authelia-api needs it
2026-07-11 17:59:23 +01:00
a21e63c4a2
explicit AUTHELIA_API_LISTEN=0.0.0.0:8080 in compose
2026-07-11 17:51:11 +01:00
0d7defff4e
fix network creation: use -f for rm, show errors on create
2026-07-11 10:14:10 +01:00
14e60151fd
fixed IPs: nextwks-net on 172.18.0.0/24 with static addresses
2026-07-11 10:08:52 +01:00
62b42635b2
move AGENT.md out of repo to ~/development/, add to .gitignore
2026-07-11 09:24:47 +01:00
9f6c85ce60
v0.1.0.0033: update AGENT.md/README.md/CHANGELOG with final architecture docs
2026-07-11 09:20:29 +01:00
7303c94a3c
fix bcrypt hash corruption: avoid bash -c re-expanding $ signs, auto-regenerate hash on update
2026-07-11 09:16:14 +01:00
f0c6aa1a2e
always regenerate configs on --update too (picks up template changes like storage.encryption_key)
2026-07-11 09:13:22 +01:00
080341f8a8
stop containers before copying binary to avoid Text file busy
2026-07-11 09:11:27 +01:00
034e6688de
firewall: apply redirects in all modes, persist across reboots
2026-07-11 09:09:48 +01:00
9ba62e4c8b
add storage.encryption_key to Authelia config, fix certs directory
2026-07-11 09:08:31 +01:00
0dbb576d1b
admin password: 24 chars mixed case + numbers via base64
2026-07-11 09:00:56 +01:00
336574571f
admin password: 24 hex chars instead of 12
2026-07-11 09:00:08 +01:00
fc93201313
install mode: detect existing install and deflect to --update or --destroy
2026-07-11 08:57:36 +01:00
fc1a98cbfe
fix .gitignore: scope nextworkspace to root to not ignore config/nextworkspace/
2026-07-11 08:54:56 +01:00
3df375e047
refuse to run under sudo, update README/AGENT.md to match
2026-07-11 08:47:54 +01:00
b060e23a1d
add tools/firewall-routing.sh, fix .env Permission denied, apply firewall from cloned repo
2026-07-11 08:42:19 +01:00
e92382266f
rootless podman: ports 8080/8443, iptables redirect 80→8080 443→8443, no sudo for podman
2026-07-11 00:38:24 +01:00
3ca19403fa
nextwks.sh: replace full root escalation with per-command sudo, files owned by user
2026-07-11 00:34:21 +01:00
d41d1443a8
fix launcher health check: install curl in alpine, update script + applySettings path
2026-07-11 00:28:44 +01:00
89ea56e255
nextwks.sh: chown target dirs to non-root user after deploy
2026-07-11 00:23:52 +01:00
1b24799026
nextwks.sh: add IMAP prompts, stop old containers in all modes, port conflict check, health check diagnostics
2026-07-11 00:21:21 +01:00
2999f5da47
nextwks.sh: fix SIGPIPE crash on password gen and Go version fetch under pipefail
2026-07-11 00:17:07 +01:00
d23b6c2909
nextwks.sh: auto-escalate to root via sudo instead of erroring out
2026-07-11 00:14:55 +01:00
6e95c088e4
nextwks.sh: add root check with clear error message
2026-07-11 00:13:01 +01:00
6113f62ad2
README: add explicit curl download command before install
2026-07-11 00:07:56 +01:00
81e5505f2a
Unified install/update/destroy script with ephemeral build dir
...
- Replace deploy.sh and install.sh with tools/nextwks.sh
- Build in /tmp/nextwks-build (fresh clone every time), no more /opt/NextWks
- Script saves itself to ~/nextwks.sh on --install for easy future access
- Add AGENT.md with workflow rules for the new approach
- Secrets persisted in /opt/backup/.env (JWT, SESSION, password hash)
- Update README and CHANGELOG
2026-07-11 00:02:55 +01:00
07288f4e19
chore: bump to 0.1.0.0031
2026-07-10 23:34:19 +01:00
7b797f0785
fix: version display in admin header
2026-07-10 23:34:10 +01:00
2a255b55ec
chore: bump to 0.1.0.0030
2026-07-10 23:31:06 +01:00
20cc74ae50
fix: translation loader path to /opt/nextworkspace/lng
2026-07-10 23:30:57 +01:00
b7c65d37cd
chore: bump to 0.1.0.0029
2026-07-10 23:24:43 +01:00
a4b92feed9
fix: show git pull errors
2026-07-10 23:24:24 +01:00
54b2baf36c
chore: bump to 0.1.0.0028
2026-07-10 23:21:42 +01:00
960ee5bc7c
fix: smart update stops and removes old containers before redeploy
2026-07-10 23:21:33 +01:00
cd4c48b2f5
chore: bump to 0.1.0.0027
2026-07-10 23:03:31 +01:00
10d8d8bfc6
fix: inject AUTHELIA_SECRET into launcher compose env
2026-07-10 22:48:05 +01:00
87320e43e1
fix: auto-assign subnet, no static IPs (avoids conflicts)
2026-07-10 22:10:43 +01:00
9083119aca
fix: use 10.200.0.0/24 subnet (172.16.0.0/16 is host network)
2026-07-10 22:09:46 +01:00
634cab3464
fix: static IPs 172.16.0.0/24 in stack.yaml
2026-07-10 22:05:30 +01:00
