5 Commits

Include renames

Author	SHA1	Message	Date
admin	fc77fcb89b	R-972: Go 1.27.2, x/crypto v0.58.0, debian 13.7-slim — pinned by version and digest ... Go 1.24 had no security fixes left; the shipped binary carried 62 known Go vulnerabilities and the bookworm base 12 fixable criticals. Full suite green on Go 1.27.2 (i18n parity included). Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-16 18:37:52 +02:00
admin	15206314ab	v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR) ... Mint a 160-bit capability URL (/s/<token>) serving a standalone read-only guest launcher: same tiles, opens apps in new tabs, no account, no admin session. Information only, zero control — every privilege stays behind each app's own auth. - /s/ pre-auth pass-through (after the claim gate) + session-CSRF exemption; guest password POST carries its own pre-auth HMAC CSRF. - Constant-time token match; empty stored token = disabled = byte-identical mux 404. - Optional per-share password: separate bcrypt hash + own attempt map; signed cookie = HMAC(token|passwordHash) keyed with web.session_secret, so rotate/change invalidates. - Guest labels ride the v0.164.0 ruling; never expose internal state vocabulary. - Token redacted in logs (/s/<redacted>); never in CHANGELOG/REPORT/CONTEXT. - Admin modal: copy-link, QR (go-qrcode), set/clear password, rotate, disable. - Tests: Groups A-G (14) + 3 red-proofs verified red.	2026-07-24 12:08:43 +02:00
adminandClaude Opus 4.8	0e20eb19c1	v0.88.0: app-email SMTP relay (in-process shim + per-app injection) ... In-process go-smtp shim (Shape 1): apps → shim → hub → Resend, Resend key stays hub-side. From-header allowlist (reject 5xx pre-hub), single-shot raw-MIME forward, status→SMTP mapping. Global + per-app toggles gate compose-time env injection from .felhom.yml smtp_mapping. Hungarian UI on settings + app config pages. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-29 08:45:04 +02:00
adminandClaude Opus 4.6	3e8baebfa5	v0.5.0: Backup bugfixes + monitoring page with metrics store ... - Fix "Helyi mentés" showing "–" after controller restart by synthesizing LastBackup from snapshot history and LastDBDump from dump files on disk - New monitoring page (/monitoring) with system info, metrics charts, and container resource overview - SQLite metrics store (modernc.org/sqlite, pure Go, no CGO) with 60s collection interval and 30-day auto-prune - REST API endpoints: /api/metrics/system, /api/metrics/containers/summary, /api/metrics/containers/{name}, /api/metrics/sysinfo - Chart.js 4.4.7 embedded locally for offline environments - System info provider reads hostname, OS, kernel, CPU, uptime from /proc - Docker compose updated with /etc/os-release host mount Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 10:14:46 +01:00
admin	67ba0fe759	Added memory limits and system info for memory	2026-02-14 11:44:06 +01:00