Adrian Astles
69baa6785f
feat: Add setup token security for initial server setup
...
- Add setupTokens database table with proper schema
- Implement setup token generation on first server startup
- Add token validation endpoint and modify admin creation
- Update initial setup page to require setup token
- Add migration scripts for both SQLite and PostgreSQL
- Add internationalization support for setup token fields
- Implement proper error handling and logging
- Add CLI command for resetting user security keys
This prevents unauthorized access during initial server setup by requiring
a token that is generated and displayed in the server console.
2025-08-03 21:17:18 +08:00
miloschwartz
84268e484d
update docs links
2025-08-01 22:34:02 -07:00
miloschwartz
7402590f49
remove api-key-org association for root keys
2025-08-01 15:56:03 -07:00
Owen
6d359b6bb9
Add createdAt to org insert
2025-07-31 17:53:11 -07:00
Owen
ea6f803e78
Add createdAt to org
2025-07-31 17:51:30 -07:00
Owen
0151f8a6a9
Fix bad sourcePort
2025-07-31 15:57:30 -07:00
Owen
36d0b83ed3
Fix errors again
2025-07-31 15:00:17 -07:00
Owen
f0138fad4f
Improve gerbil logging
2025-07-31 14:25:22 -07:00
Owen
69802e78f8
Org is not optional
2025-07-31 11:06:07 -07:00
miloschwartz
b351520e92
add clients enabled middleware
2025-07-30 23:18:51 -07:00
miloschwartz
d38656e026
add clients to int api
2025-07-30 21:31:16 -07:00
Owen
35823d5751
Fix adding sites to client
2025-07-28 22:40:27 -07:00
Owen
d732c1a845
Clean up migrations
2025-07-28 17:32:15 -07:00
Owen
4d7e25f97b
Complete migrations
2025-07-28 17:22:53 -07:00
Owen
80656f48e0
Sqlite migration done
2025-07-28 17:18:51 -07:00
Owen
ebde149980
Merge branch 'main' into dev
2025-07-28 17:15:05 -07:00
miloschwartz
adc0a81592
delete org domains and resources on org delete
2025-07-28 15:34:56 -07:00
miloschwartz
494329f568
delete resources on delete org
2025-07-28 12:55:20 -07:00
Owen
a1e8211ba7
Dont send enableProxy
2025-07-28 12:53:13 -07:00
Milo Schwartz
bda2aa46b6
Merge pull request #1124 from adrianeastles/feature/member-resouce-landing-page
...
New Member Resource Landing Page
2025-07-28 14:33:09 -04:00
Owen
e105a523e4
Add log and fix default
2025-07-27 14:11:36 -07:00
Owen
28f8b05dbc
Basic clients working
2025-07-27 10:21:27 -07:00
Owen Schwartz
d95286db0e
Merge pull request #1139 from SigmaSquadron/push-xlmpuutwtnuy
...
add shebangs to migration and server scripts
2025-07-27 10:11:17 -07:00
Fernando Rodrigues
9e87c42d0c
add shebangs to migration and server scripts
...
In NixOS, we wrap these files in a bash script to allow users to just run them as normal executables, instead of calling them as arguments to Node.JS. In our build scripts, we just add the shebang after the files have been compiled, but adding it upstream will allow all Pangolin users to just run ./server.mjs to start their Pangolin instances.
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net >
2025-07-27 13:10:18 +10:00
Fernando Rodrigues
0b52cd002e
add an environment variable for the smtp_pass config option
...
The password for secure authentication may be sensitive, so it is best
to not leave it lying around in a config file. This commit introduces
the EMAIL_SMTP_PASS environment variable, which can be set to configure
the SMTP password without writing it to the configuration file.
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net >
2025-07-27 13:03:29 +10:00
Owen
15adfcca8c
Add remote subnets to ui
2025-07-24 22:01:22 -07:00
Owen
5f75813e84
Handle relaying change values in gerbil
2025-07-24 20:47:39 -07:00
Owen
59cb06acf4
Support relaying on register
2025-07-24 14:48:24 -07:00
Adrian Astles
bcc2c59f08
Add member portal functionality - extracted from feature/member-landing-page
2025-07-24 21:04:55 +08:00
Owen
5c929badeb
Send endpoint
2025-07-22 11:21:39 -07:00
miloschwartz
114ce8997f
add tos and pp consent
2025-07-21 16:57:21 -07:00
Owen
f1bba3b958
Fix issues in pg schema
2025-07-21 16:32:13 -07:00
miloschwartz
053acef728
allow using password to log in if security keys are available
2025-07-21 14:28:32 -07:00
Owen
d000879c01
Add config for domains
2025-07-21 12:42:50 -07:00
Owen
bbaea4def0
Handle peer relay dynamically now
2025-07-18 21:42:12 -07:00
Milo Schwartz
54f9282166
Merge pull request #1091 from fosrl/dev
...
Dev
2025-07-18 18:53:45 -04:00
miloschwartz
a39b1db266
bump version
2025-07-18 15:50:55 -07:00
miloschwartz
2ddb4ec905
allow multi level sudomains in domain picker
2025-07-18 15:48:23 -07:00
miloschwartz
b34c3db956
fix redirect bug for some accounts when disable create org is enabled
2025-07-18 12:59:57 -07:00
Owen
afea958aca
Also limit to org
2025-07-18 11:48:14 -07:00
Owen
dca2a29865
Fix #1085
2025-07-18 11:32:07 -07:00
Owen
97b8e84143
Fix #1085
2025-07-18 11:16:10 -07:00
Tom Ribbens
676aa1358d
test if user/pass config is set and if not set auth: null
2025-07-18 17:09:22 +02:00
Owen
2e986def78
const
2025-07-17 23:15:16 -07:00
Owen
7e58e0b490
Correctly handle ssl on new domains
2025-07-17 22:57:47 -07:00
Owen
9b01aecf3c
Add default cert resovler
2025-07-17 22:37:33 -07:00
miloschwartz
86043fd5f8
add defaults for domain cert resolver and prefer wildcard cert
2025-07-17 22:35:07 -07:00
Owen
0a2b1d9e53
Use a records for the wildcard
2025-07-17 16:17:01 -07:00
Owen
5148988dcc
Also dont return if you are passing an exit node
2025-07-17 14:59:49 -07:00
Owen
28b57ba652
Allow null exit node id as well
2025-07-17 14:57:09 -07:00
