Commit Graph

255 Commits

Author SHA1 Message Date
root bee87b02f8 Add missing deps 2025-02-04 11:24:39 +01:00
Michael Reber 8e43d4fb51 Include soft reload to not loosing connections, also update packages 2025-02-04 10:21:13 +01:00
Michael Reber 4375347556 Update github actions 2025-02-04 09:59:10 +01:00
Michael Reber cecc451859 Add Html-escape function for inputs 2025-02-04 09:58:25 +01:00
Michael Reber cb5246c208 Fix regex pattern and remove == false directives 2025-02-04 09:57:17 +01:00
Michael Reber 806ff65207 Upgrade go and modules to latest. Fix bot.go deprectation 2025-02-03 17:37:19 +01:00
Michael Reber 6b078aad19 Include missing dep 2025-02-03 17:13:05 +01:00
Michael Reber dd621ea472 change module name, before upgrade 2025-02-02 22:20:28 +01:00
Khanh Ngo 2fdafd34ca fix dependencies (#535) 2024-01-13 15:35:23 +01:00
0xCA 92f5b5c8b1 Cache user crc32 on db init (fix for #523) (#534) 2024-01-12 21:30:07 +01:00
0xCA 8f3433b714 Case-insensitive search by notes; display notes on the client card (#532) 2024-01-12 21:28:15 +01:00
0xCA 7856ce9555 Status page: display peers IPs only to admins (#521) 2024-01-10 20:27:01 +01:00
0xCA 84032d1e06 Make sure init.sh is executable (#526) 2024-01-10 20:25:40 +01:00
0xCA ecea82d172 Support for notes about clients (#527) 2024-01-09 21:03:27 +01:00
kevin 73108f7f21 Fix updateSearchList js error (#524) 2024-01-09 20:52:23 +01:00
Khanh Ngo 99104e4295 fix: revert wgctrl module version (#525) 2024-01-07 10:45:05 +01:00
Khanh Ngo c5f52173e0 chore: update release workflow 2024-01-07 09:44:05 +01:00
Khanh Ngo a22e807d2a chore: update docker build workflow
Keep the 'v' in app version so we are able to query to GitHub release api to fetch its
release information
2024-01-06 10:09:46 +01:00
0xCA fa33d3f66e Session improvements (#510) 2024-01-06 09:11:20 +01:00
Khanh Ngo 46b09348e3 add iptables package (#520) 2024-01-04 10:46:38 +01:00
Khanh Ngo b3c22aa81f Add golangci-lint CI (#516) 2023-12-31 21:46:30 +01:00
Khanh Ngo 769883f020 add PersistentKeepalive config to server-side Peer config (#515) 2023-12-31 21:08:13 +01:00
Khanh Ngo 45849a2aee chore: code adjustment (#512) 2023-12-29 10:56:37 +01:00
Khanh Ngo 8cfe9a3d5b Resolve conflict 2023-12-29 10:13:30 +01:00
Khanh Ngo 4ffd7319f8 Upgrade dependencies (#511)
- Upgrade GitHub Actions
- Upgrade Go version
- Upgrade Alpine image
2023-12-29 09:54:51 +01:00
0xCA 41bf0bc92c Telegram support (#488) 2023-12-29 09:22:12 +01:00
0xCA 841db62347 Fixed tag input being too small and unable to fit a CIDR (#509)
Co-authored-by: 0xCA <undefined>
2023-12-28 08:37:26 +01:00
Alexandra Stone 37f459c535 Minor readme tweak. 2023-12-27 14:47:15 -07:00
Alexandra Stone a8e96f5457 Correct flag to helo and make shorter 2023-12-27 14:42:31 -07:00
kevin 867aa1305d Fix logic error and make some settings optional in wg.conf template. (#506) 2023-12-27 20:50:30 +01:00
Daniel Tilă c2a6ced991 Describe the fact you can expose other port than WGUI_SERVER_LISTEN_PORT (#507) 2023-12-27 10:10:23 +01:00
Khanh Ngo cb118f4dea Create CONTRIBUTING.md 2023-12-27 10:08:00 +01:00
0xCA a9be53899c Subnet range selector, interface fixes (#481) 2023-12-27 09:08:55 +01:00
Vahid e73047b14f Feature: Unix domain socket support (#492)
Co-authored-by: Khanh Ngo <k@ndk.name>
2023-12-25 20:31:11 +01:00
0xCA 47fac2b49b Fixed tag input being too small and unable to fit a CIDR (#483)
Co-authored-by: 0xCA <undefined>
2023-12-25 20:25:38 +01:00
nebulosa2007 c8623082fe Make Interface PreDown setting. (#480) 2023-12-25 20:23:51 +01:00
Michael Walter af7742bfb3 Update routes.go (#475)
use config file download mime type "txt/conf" to prevent downloaded configs being saved as <filename>.txt, instead of wanted <filename>.conf.
Tested on Android Firefox and Chrome
2023-12-25 20:22:42 +01:00
Gabriel Soares e2e1159ef4 add endpoint field to client (#470) 2023-12-25 20:21:37 +01:00
Cameron 585b55c2ee fix: handle os.chmod errors (#457) 2023-12-25 20:17:31 +01:00
Marcus Wichelmann 13a4c05ff5 fix: add basic server-side input validation (#435)
This mitigates possible path traversal attacks by using
e.g. "../user" as a user name.
2023-12-25 20:07:47 +01:00
Marcus Wichelmann a06bce88e0 fix: add content-type check to user management routes to mitigate CSRF (#427) 2023-12-25 20:03:29 +01:00
Cameron 3024d36d76 env variable file support (#391) 2023-12-25 19:58:31 +01:00
Alexandra Stone aac9ba8b50 Added variable to readme 2023-10-27 11:59:55 -06:00
Alexandra Stone ece1c76aec implement hello hostname to resolve smtp-relay issue 2023-10-27 11:33:04 -06:00
Alexandra Stone d2b67277e3 Add hello hostname to config 2023-10-27 11:32:26 -06:00
Alexandra Stone 393f896616 Add hello hostname flag 2023-10-27 11:32:02 -06:00
Khanh Ngo b55543f424 fix: set random session secret if not set (#417) 2023-08-11 11:48:51 +02:00
Paul Dee 364a43e3dc Implement updating a client Pub+PSK when editing a client (#401)
This covers the normal use-case where clients generate keys
locally on their device and notify the server of their new/updated keys.

The server verifies Preshared and Public keys independently of each
other. Should a client generate a new tunnel which lacks a PSK and send
only a Public key to the server (admin) where the earlier server created
profile has a Preshared key, the server admin/user must determine the
course of action:
keep or remove the PSK.
2023-08-11 10:34:11 +02:00
Cameron 7488f283c4 secure jsondb user perms (#404) 2023-08-11 10:25:56 +02:00
Hoang Nguyen 6bbe230fe8 [Vulnerability] Cross site scripting (XSS) and Open Redirect on the login page (#396) 2023-06-23 09:42:39 +02:00