Commit graph

219 commits

Author SHA1 Message Date
0xCA a9be53899c
Subnet range selector, interface fixes (#481) 2023-12-27 09:08:55 +01:00
Vahid e73047b14f
Feature: Unix domain socket support (#492)
Co-authored-by: Khanh Ngo <k@ndk.name>
2023-12-25 20:31:11 +01:00
0xCA 47fac2b49b
Fixed tag input being too small and unable to fit a CIDR (#483)
Co-authored-by: 0xCA <undefined>
2023-12-25 20:25:38 +01:00
nebulosa2007 c8623082fe
Make Interface PreDown setting. (#480) 2023-12-25 20:23:51 +01:00
Michael Walter af7742bfb3
Update routes.go (#475)
use config file download mime type "txt/conf" to prevent downloaded configs being saved as <filename>.txt, instead of wanted <filename>.conf.
Tested on Android Firefox and Chrome
2023-12-25 20:22:42 +01:00
Gabriel Soares e2e1159ef4
add endpoint field to client (#470) 2023-12-25 20:21:37 +01:00
Cameron 585b55c2ee
fix: handle os.chmod errors (#457) 2023-12-25 20:17:31 +01:00
Marcus Wichelmann 13a4c05ff5
fix: add basic server-side input validation (#435)
This mitigates possible path traversal attacks by using
e.g. "../user" as a user name.
2023-12-25 20:07:47 +01:00
Marcus Wichelmann a06bce88e0
fix: add content-type check to user management routes to mitigate CSRF (#427) 2023-12-25 20:03:29 +01:00
Cameron 3024d36d76
env variable file support (#391) 2023-12-25 19:58:31 +01:00
Khanh Ngo b55543f424
fix: set random session secret if not set (#417) 2023-08-11 11:48:51 +02:00
Paul Dee 364a43e3dc
Implement updating a client Pub+PSK when editing a client (#401)
This covers the normal use-case where clients generate keys
locally on their device and notify the server of their new/updated keys.

The server verifies Preshared and Public keys independently of each
other. Should a client generate a new tunnel which lacks a PSK and send
only a Public key to the server (admin) where the earlier server created
profile has a Preshared key, the server admin/user must determine the
course of action:
keep or remove the PSK.
2023-08-11 10:34:11 +02:00
Cameron 7488f283c4
secure jsondb user perms (#404) 2023-08-11 10:25:56 +02:00
Hoang Nguyen 6bbe230fe8
[Vulnerability] Cross site scripting (XSS) and Open Redirect on the login page (#396) 2023-06-23 09:42:39 +02:00
Gabriel Klavans 28f3e820f0
Remove duplicate env var entry (#392) 2023-06-22 21:51:38 +02:00
A A R I X b9e5ddf194
Added BIND_ADDRESS environment variable to the project README (#384) 2023-06-06 21:11:43 +02:00
Khanh Ngo 39324c5cf9
Add .gitattributes 2023-06-06 21:09:12 +02:00
Khanh Ngo 346e3bd3b8
chore: remove healthcheck from Dockerfile (#382) 2023-06-03 10:40:24 +02:00
Khanh Ngo 8ac33a0278
GHA fixes 2023-05-24 21:21:44 +02:00
Khanh Ngo 5183bb5093
GHA fixes 2023-05-24 18:07:50 +02:00
Khanh Ngo 745141c752
GHA fixes 2023-05-24 18:00:48 +02:00
Khanh Ngo 19527ef1e0
GHA fixes 2023-05-24 17:58:20 +02:00
Khanh Ngo 86e52c5868
Add docker build workflow 2023-05-24 17:51:44 +02:00
Khanh Ngo f3ed766bc4
Update stale.yml 2023-05-24 12:08:12 +02:00
andycandy-de e9357d83e2
Added Table to global settings (#308) 2023-05-24 12:06:05 +02:00
djarbz 59133327de
Healthcheck: account for custom bind port (#295) 2023-05-24 12:05:27 +02:00
ByteDream ec757286c5
Hide user settings if login is disabled (#356) (#361) 2023-05-24 12:04:02 +02:00
Paul Dee cfbdae7abb
Follow-up fix for fwmark 101b5564c2 (#372)
Remove all FwMark settings from client configs (illegal) and QRcode
(also illegal).
2023-05-24 12:02:07 +02:00
Khanh Ngo ac99317ba3
Update README.md 2023-03-17 09:53:57 +01:00
Khanh Ngo 5e0217db04
Set password type field 2023-03-16 16:25:38 +01:00
Khanh Ngo d3c47c53c8 QR code fixes 2023-03-16 09:09:48 +01:00
Khanh Ngo 00f7f3d280 Style fixes 2023-03-16 08:58:28 +01:00
ByteDream 4fc52b62d2
Replace go.rice with native go embedding (#331) 2023-03-16 08:40:04 +01:00
Khanh Ngo e3e3639443 Bracket fixes 2023-03-15 21:50:46 +01:00
Arminas c8240fe157
fixed about page not showing menu items (#343) 2023-03-15 21:45:46 +01:00
Matze abef29bf17
better error-handling if no public IP could be detected (#323) 2023-03-15 21:41:46 +01:00
Paul Dee 814093cdd3
Stamp git commit into docker builds. (#325) 2023-03-15 21:39:20 +01:00
Paul Dee b80c44af43
Fix for fwmark (#279) 2023-03-15 21:37:39 +01:00
ByteDream b8341dd36f
Add docker-compose examples (#339) 2023-03-15 21:35:57 +01:00
ByteDream 7b848c841f
Disable cgo on release ci (#334) 2023-03-15 21:30:18 +01:00
ByteDream 3d59c7d0de
Add log levels (#332) 2023-03-15 21:29:08 +01:00
Arminas d1cf0ca7eb
Client filtration (#330) 2023-03-15 21:24:44 +01:00
Arminas 9f20fe6c09
Show apply config button only when needed (#292) 2023-03-15 21:15:41 +01:00
Arminas 6dd5590940
User management panel (#289) 2023-03-15 21:13:53 +01:00
Arminas aadf099f50
About page (#296) 2023-02-16 17:31:24 +01:00
Nathan Aclander 64b8eba092
Match MTU value between settings and documentation (#298)
Under Global Settings, the MTU value on the left is by default set to 1450, but the documentation claims 1420. This updates the documentation to match the correct default value.
2023-02-16 17:24:23 +01:00
Arminas 40a0ba859e
Client search (#303) 2023-02-16 17:17:10 +01:00
Arminas cc285c5c20
Status show IP's (#291) 2023-02-16 17:10:11 +01:00
ByteDream a866977cb0
Add favicon (#288) 2023-02-16 17:09:24 +01:00
Arminas ccffe4028a
Qr code filename fix (#290) 2023-02-16 17:08:26 +01:00