Commit Graph

214 Commits

Author SHA1 Message Date
Gabriel Soares
e2e1159ef4 add endpoint field to client (#470) 2023-12-25 20:21:37 +01:00
Cameron
585b55c2ee fix: handle os.chmod errors (#457) 2023-12-25 20:17:31 +01:00
Marcus Wichelmann
13a4c05ff5 fix: add basic server-side input validation (#435)
This mitigates possible path traversal attacks by using
e.g. "../user" as a user name.
2023-12-25 20:07:47 +01:00
Marcus Wichelmann
a06bce88e0 fix: add content-type check to user management routes to mitigate CSRF (#427) 2023-12-25 20:03:29 +01:00
Cameron
3024d36d76 env variable file support (#391) 2023-12-25 19:58:31 +01:00
Khanh Ngo
b55543f424 fix: set random session secret if not set (#417) 2023-08-11 11:48:51 +02:00
Paul Dee
364a43e3dc Implement updating a client Pub+PSK when editing a client (#401)
This covers the normal use-case where clients generate keys
locally on their device and notify the server of their new/updated keys.

The server verifies Preshared and Public keys independently of each
other. Should a client generate a new tunnel which lacks a PSK and send
only a Public key to the server (admin) where the earlier server created
profile has a Preshared key, the server admin/user must determine the
course of action:
keep or remove the PSK.
2023-08-11 10:34:11 +02:00
Cameron
7488f283c4 secure jsondb user perms (#404) 2023-08-11 10:25:56 +02:00
Hoang Nguyen
6bbe230fe8 [Vulnerability] Cross site scripting (XSS) and Open Redirect on the login page (#396) 2023-06-23 09:42:39 +02:00
Gabriel Klavans
28f3e820f0 Remove duplicate env var entry (#392) 2023-06-22 21:51:38 +02:00
A A R I X
b9e5ddf194 Added BIND_ADDRESS environment variable to the project README (#384) 2023-06-06 21:11:43 +02:00
Khanh Ngo
39324c5cf9 Add .gitattributes 2023-06-06 21:09:12 +02:00
Khanh Ngo
346e3bd3b8 chore: remove healthcheck from Dockerfile (#382) 2023-06-03 10:40:24 +02:00
Khanh Ngo
8ac33a0278 GHA fixes 2023-05-24 21:21:44 +02:00
Khanh Ngo
5183bb5093 GHA fixes 2023-05-24 18:07:50 +02:00
Khanh Ngo
745141c752 GHA fixes 2023-05-24 18:00:48 +02:00
Khanh Ngo
19527ef1e0 GHA fixes 2023-05-24 17:58:20 +02:00
Khanh Ngo
86e52c5868 Add docker build workflow 2023-05-24 17:51:44 +02:00
Khanh Ngo
f3ed766bc4 Update stale.yml 2023-05-24 12:08:12 +02:00
andycandy-de
e9357d83e2 Added Table to global settings (#308) 2023-05-24 12:06:05 +02:00
djarbz
59133327de Healthcheck: account for custom bind port (#295) 2023-05-24 12:05:27 +02:00
ByteDream
ec757286c5 Hide user settings if login is disabled (#356) (#361) 2023-05-24 12:04:02 +02:00
Paul Dee
cfbdae7abb Follow-up fix for fwmark 101b5564c267e673afdea97e24a6bd778939abd8 (#372)
Remove all FwMark settings from client configs (illegal) and QRcode
(also illegal).
2023-05-24 12:02:07 +02:00
Khanh Ngo
ac99317ba3 Update README.md 2023-03-17 09:53:57 +01:00
Khanh Ngo
5e0217db04 Set password type field 2023-03-16 16:25:38 +01:00
Khanh Ngo
d3c47c53c8 QR code fixes 2023-03-16 09:09:48 +01:00
Khanh Ngo
00f7f3d280 Style fixes 2023-03-16 08:58:28 +01:00
ByteDream
4fc52b62d2 Replace go.rice with native go embedding (#331) 2023-03-16 08:40:04 +01:00
Khanh Ngo
e3e3639443 Bracket fixes 2023-03-15 21:50:46 +01:00
Arminas
c8240fe157 fixed about page not showing menu items (#343) 2023-03-15 21:45:46 +01:00
Matze
abef29bf17 better error-handling if no public IP could be detected (#323) 2023-03-15 21:41:46 +01:00
Paul Dee
814093cdd3 Stamp git commit into docker builds. (#325) 2023-03-15 21:39:20 +01:00
Paul Dee
b80c44af43 Fix for fwmark (#279) 2023-03-15 21:37:39 +01:00
ByteDream
b8341dd36f Add docker-compose examples (#339) 2023-03-15 21:35:57 +01:00
ByteDream
7b848c841f Disable cgo on release ci (#334) 2023-03-15 21:30:18 +01:00
ByteDream
3d59c7d0de Add log levels (#332) 2023-03-15 21:29:08 +01:00
Arminas
d1cf0ca7eb Client filtration (#330) 2023-03-15 21:24:44 +01:00
Arminas
9f20fe6c09 Show apply config button only when needed (#292) 2023-03-15 21:15:41 +01:00
Arminas
6dd5590940 User management panel (#289) 2023-03-15 21:13:53 +01:00
Arminas
aadf099f50 About page (#296) 2023-02-16 17:31:24 +01:00
Nathan Aclander
64b8eba092 Match MTU value between settings and documentation (#298)
Under Global Settings, the MTU value on the left is by default set to 1450, but the documentation claims 1420. This updates the documentation to match the correct default value.
2023-02-16 17:24:23 +01:00
Arminas
40a0ba859e Client search (#303) 2023-02-16 17:17:10 +01:00
Arminas
cc285c5c20 Status show IP's (#291) 2023-02-16 17:10:11 +01:00
ByteDream
a866977cb0 Add favicon (#288) 2023-02-16 17:09:24 +01:00
Arminas
ccffe4028a Qr code filename fix (#290) 2023-02-16 17:08:26 +01:00
Alexander Sulfrian
227e51b9cf SMTP: Support disabling encryption (#297) 2023-02-16 17:06:45 +01:00
Nenodema
f256668a99 WireGaurd --> WireGuard (Typo) (#281) 2022-12-26 10:12:09 +01:00
Paul Dee
e76c573b1d Some comment fixes (#278) 2022-12-26 10:02:07 +01:00
Paul Dee
310c8343d3 Make client QRCode honour client Use Server DNS setting. (#276)
Fixes issue #275
2022-12-26 10:00:59 +01:00
ByteDream
82c8fe9926 Fix doubled tags on reload (#277) 2022-12-21 21:55:49 +01:00