Commit Graph
217 Commits
Author SHA1 Message Date
0xCAand0xCA 47fac2b49b Fixed tag input being too small and unable to fit a CIDR (#483)
Co-authored-by: 0xCA <undefined>
2023-12-25 20:25:38 +01:00
nebulosa2007 c8623082fe Make Interface PreDown setting. (#480) 2023-12-25 20:23:51 +01:00
Michael Walter af7742bfb3 Update routes.go (#475)
use config file download mime type "txt/conf" to prevent downloaded configs being saved as <filename>.txt, instead of wanted <filename>.conf.
Tested on Android Firefox and Chrome
2023-12-25 20:22:42 +01:00
Gabriel Soares e2e1159ef4 add endpoint field to client (#470) 2023-12-25 20:21:37 +01:00
Cameron 585b55c2ee fix: handle os.chmod errors (#457) 2023-12-25 20:17:31 +01:00
Marcus Wichelmann 13a4c05ff5 fix: add basic server-side input validation (#435)
This mitigates possible path traversal attacks by using
e.g. "../user" as a user name.
2023-12-25 20:07:47 +01:00
Marcus Wichelmann a06bce88e0 fix: add content-type check to user management routes to mitigate CSRF (#427) 2023-12-25 20:03:29 +01:00
Cameron 3024d36d76 env variable file support (#391) 2023-12-25 19:58:31 +01:00
Khanh Ngo b55543f424 fix: set random session secret if not set (#417) 2023-08-11 11:48:51 +02:00
Paul Dee 364a43e3dc Implement updating a client Pub+PSK when editing a client (#401)
This covers the normal use-case where clients generate keys
locally on their device and notify the server of their new/updated keys.

The server verifies Preshared and Public keys independently of each
other. Should a client generate a new tunnel which lacks a PSK and send
only a Public key to the server (admin) where the earlier server created
profile has a Preshared key, the server admin/user must determine the
course of action:
keep or remove the PSK.
2023-08-11 10:34:11 +02:00
Cameron 7488f283c4 secure jsondb user perms (#404) 2023-08-11 10:25:56 +02:00
Hoang Nguyen 6bbe230fe8 [Vulnerability] Cross site scripting (XSS) and Open Redirect on the login page (#396) v0.5.2 2023-06-23 09:42:39 +02:00
Gabriel Klavans 28f3e820f0 Remove duplicate env var entry (#392) 2023-06-22 21:51:38 +02:00
A A R I X b9e5ddf194 Added BIND_ADDRESS environment variable to the project README (#384) 2023-06-06 21:11:43 +02:00
Khanh Ngo 39324c5cf9 Add .gitattributes 2023-06-06 21:09:12 +02:00
Khanh Ngo 346e3bd3b8 chore: remove healthcheck from Dockerfile (#382) v0.5.1 2023-06-03 10:40:24 +02:00
Khanh Ngo 8ac33a0278 GHA fixes v0.5.0 2023-05-24 21:21:44 +02:00
Khanh Ngo 5183bb5093 GHA fixes 2023-05-24 18:07:50 +02:00
Khanh Ngo 745141c752 GHA fixes 2023-05-24 18:00:48 +02:00
Khanh Ngo 19527ef1e0 GHA fixes 2023-05-24 17:58:20 +02:00
Khanh Ngo 86e52c5868 Add docker build workflow 2023-05-24 17:51:44 +02:00
Khanh Ngo f3ed766bc4 Update stale.yml 2023-05-24 12:08:12 +02:00
andycandy-de e9357d83e2 Added Table to global settings (#308) 2023-05-24 12:06:05 +02:00
djarbz 59133327de Healthcheck: account for custom bind port (#295) 2023-05-24 12:05:27 +02:00
ByteDream ec757286c5 Hide user settings if login is disabled (#356) (#361) 2023-05-24 12:04:02 +02:00
Paul Dee cfbdae7abb Follow-up fix for fwmark 101b5564c2 (#372)
Remove all FwMark settings from client configs (illegal) and QRcode
(also illegal).
2023-05-24 12:02:07 +02:00
Khanh Ngo ac99317ba3 Update README.md 2023-03-17 09:53:57 +01:00
Khanh Ngo 5e0217db04 Set password type field 2023-03-16 16:25:38 +01:00
Khanh Ngo d3c47c53c8 QR code fixes 2023-03-16 09:09:48 +01:00
Khanh Ngo 00f7f3d280 Style fixes 2023-03-16 08:58:28 +01:00
ByteDream 4fc52b62d2 Replace go.rice with native go embedding (#331) 2023-03-16 08:40:04 +01:00
Khanh Ngo e3e3639443 Bracket fixes 2023-03-15 21:50:46 +01:00
Arminas c8240fe157 fixed about page not showing menu items (#343) 2023-03-15 21:45:46 +01:00
Matze abef29bf17 better error-handling if no public IP could be detected (#323) 2023-03-15 21:41:46 +01:00
Paul Dee 814093cdd3 Stamp git commit into docker builds. (#325) 2023-03-15 21:39:20 +01:00
Paul Dee b80c44af43 Fix for fwmark (#279) 2023-03-15 21:37:39 +01:00
ByteDream b8341dd36f Add docker-compose examples (#339) 2023-03-15 21:35:57 +01:00
ByteDream 7b848c841f Disable cgo on release ci (#334) 2023-03-15 21:30:18 +01:00
ByteDream 3d59c7d0de Add log levels (#332) 2023-03-15 21:29:08 +01:00
Arminas d1cf0ca7eb Client filtration (#330) 2023-03-15 21:24:44 +01:00
Arminas 9f20fe6c09 Show apply config button only when needed (#292) 2023-03-15 21:15:41 +01:00
Arminas 6dd5590940 User management panel (#289) 2023-03-15 21:13:53 +01:00
Arminas aadf099f50 About page (#296) 2023-02-16 17:31:24 +01:00
Nathan Aclander 64b8eba092 Match MTU value between settings and documentation (#298)
Under Global Settings, the MTU value on the left is by default set to 1450, but the documentation claims 1420. This updates the documentation to match the correct default value.
2023-02-16 17:24:23 +01:00
Arminas 40a0ba859e Client search (#303) 2023-02-16 17:17:10 +01:00
Arminas cc285c5c20 Status show IP's (#291) 2023-02-16 17:10:11 +01:00
ByteDream a866977cb0 Add favicon (#288) 2023-02-16 17:09:24 +01:00
Arminas ccffe4028a Qr code filename fix (#290) 2023-02-16 17:08:26 +01:00
Alexander Sulfrian 227e51b9cf SMTP: Support disabling encryption (#297) 2023-02-16 17:06:45 +01:00
Nenodema f256668a99 WireGaurd --> WireGuard (Typo) (#281) 2022-12-26 10:12:09 +01:00