23 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Blake	61c7b5582c	access-list: Hash basic-auth passwords and redact API reads ... Access-list item passwords were stored and returned in plaintext. Hash on write with bcrypt, compare hashes in the proxy engine (with legacy plaintext fallback), and omit passwords from admin GET JSON.	2026-09-14 13:32:31 +00:00
eva	646904ff0a	helix-proxy: Promote develop to master ... helix-proxy: Promote develop to master	2026-09-02 13:28:38 -05:00
eva	8b334900e8	merge: Sync develop with master after compose promote ... Trees already matched; histories diverged after dual promote. Unifies tips so dual-branch layout is coherent again.	2026-09-02 18:17:39 +00:00
s1d3sw1ped_bot	a1433be417	docker: Promote compose port align to master ... Promote develop compose/README port align (ADMIN_PORT=81) to master. Resolved README conflict: kept develop port/env docs and master ADMIN_PASSWORD usage bits. Compose Option A env retained. Do not delete develop. Co-authored-by: s1d3sw1ped_bot <s1d3sw1ped+giteabot@gmail.com> Co-committed-by: s1d3sw1ped_bot <s1d3sw1ped+giteabot@gmail.com>	2026-09-02 11:41:19 -05:00
s1d3sw1ped_bot	ac295ec330	docker: Promote compose port align to master ... Land develop compose/README port align (PR #11 / a6e0693) onto master. Resolves README divergence vs master ADMIN_PASSWORD docs; keeps ADMIN_PORT=81 healthcheck align. Temporary head branch only — develop retained. Co-authored-by: s1d3sw1ped_bot <s1d3sw1ped+giteabot@gmail.com> Co-committed-by: s1d3sw1ped_bot <s1d3sw1ped+giteabot@gmail.com>	2026-09-02 11:39:36 -05:00
s1d3sw1ped_bot	6500d23f07	docs: Keep ADMIN_PASSWORD in docker run example ... Preserve master boot-rule guidance alongside compose port align.	2026-09-02 16:37:20 +00:00
s1d3sw1ped_bot	d7b7541dd1	docs: Finish README conflict resolution for promote ... Keep master ADMIN_PASSWORD / binary defaults; adopt develop compose port align (ADMIN_PORT=81, admin unpublished by default).	2026-09-02 16:37:06 +00:00
s1d3sw1ped_bot	6aa0095059	merge: Resolve develop→master compose port align ... Bring docker-compose ADMIN_PORT=81 healthcheck align from develop while keeping master README ADMIN_PASSWORD / boot rules and not publishing admin :81 by default.	2026-09-02 16:36:40 +00:00
s1d3sw1ped_bot	a6e0693409	docker: Align compose healthcheck with admin port ... Set compose ADMIN_PORT/PROXY_* to 81/80/443 so healthcheck and EXPOSE match; document binary defaults vs Docker ports in README. Fixes #10	2026-09-02 11:31:39 -05:00
s1d3sw1ped_bot	ac98b8e942	README: Fix default ports and ADMIN_PASSWORD boot rules ... Docs sync: align README with current ports/password rules. Co-authored-by: s1d3sw1ped_bot <s1d3sw1ped+giteabot@gmail.com> Co-committed-by: s1d3sw1ped_bot <s1d3sw1ped+giteabot@gmail.com>	2026-09-02 10:44:13 -05:00
s1d3sw1ped_bot	83c4f4163e	docs: Add CONTRIBUTING.md ... Add short contribution guide on the default branch. Prefer develop for future PRs; keep commit subjects in area: Imperative form.	2026-09-01 13:55:52 -05:00
s1d3sw1ped_bot	549fdd8171	docs: Add CONTRIBUTING.md ... Point new contributors at develop for PRs, kernel-style commit subjects, What/Why/Test PR bodies, and safe issue citations under Gitea merge-text closing rules.	2026-09-01 18:54:34 +00:00
s1d3sw1ped_bot	6615cc218e	docs: Add CONTRIBUTING.md ... Contributors need a short guide for develop-targeted PRs, commit subject form, and Gitea issue-closing rules.	2026-09-01 13:37:24 -05:00
s1d3sw1ped_bot	097906f5b5	Lock bootstrap admin token until password is changed (#6) ... Closes #2.	2026-08-31 22:57:37 -05:00
s1d3sw1ped_bot	13070a275d	Lock bootstrap admin token until password is changed. ... Closes #2: bootstrap JWTs cannot mutate admin APIs except change-password, production requires ADMIN_PASSWORD on first boot, admin binds loopback.	2026-09-01 03:54:09 +00:00
s1d3sw1ped_bot	6aabb76c16	Bump Go to 1.27.0 (#5)	2026-08-31 20:08:49 -05:00
s1d3sw1ped_bot	0b9db3a4c0	Add MIT LICENSE (#4) ... Copied from steamcache2.	2026-08-31 19:06:03 -05:00
s1d3sw1ped_bot	17c445ec69	Add MIT LICENSE.	2026-09-01 00:03:28 +00:00
s1d3sw1ped_bot	a43217b459	Persist per-install JWT signing secret (#3) ... Drop compiled-in JWT fallback. Use JWT_SECRET or data/.jwt_secret.	2026-08-31 18:57:55 -05:00
s1d3sw1ped_bot	22844a2a67	Persist a per-install JWT signing secret instead of a compiled-in default. ... Admin tokens were forgeable whenever JWT_SECRET was unset. Prefer the env var, otherwise write a random key to data/.jwt_secret.	2026-08-31 23:55:34 +00:00
s1d3sw1ped	466d69c44c	make fmt	2026-06-08 00:39:41 -05:00
s1d3sw1ped	abb0256f0b	add fmt and test-both to makefile to simplify tests and formatting	2026-06-08 00:39:28 -05:00
s1d3sw1ped	1cc94f2c99	initial commit	2026-06-06 07:54:44 -05:00