Commit graph

228 commits

Author SHA1 Message Date
0xCA d12ac44fe1 Fix duplicated IP suggestions 2023-12-27 08:26:41 +05:00
0xCA 9e633014b5 Fixed issues mentioned in the @systemcrash review
- Reverted formatting fixes where possible
- Clarified the note about updateSearchList()
- Fixed a typo
- Made SUBNET_RANGES example yaml-friendly
- Removed Makefile
2023-12-27 06:21:08 +05:00
0xCA 8678a74bd5 Revert tag input being too small fix 2023-12-27 06:11:21 +05:00
0xCA eaa3799514 A bit more usable makefile 2023-12-27 06:11:21 +05:00
0xCA 33db92b39e Added SUBNET_RANGES to readme 2023-12-27 06:11:21 +05:00
0xCA 2000b7f8b2 Added semiauto subnet range changer for existing clients
If the same subnet range is selected, a different IP is suggested
2023-12-27 06:07:29 +05:00
0xCA 3a789bf067 Further Apply config visibility fixes. Fixed tag input being too small. 2023-12-27 06:07:29 +05:00
0xCA 2027b3fa5d Added clients page filter by subnet range 2023-12-27 06:07:29 +05:00
0xCA 53eaab0079 Full implementation of subnet ranges for a new client, fixes
fix: free ip search was stopping after no free ip on the first interface
fix: toast obstructing the buttons
fix: stuck apply config button
2023-12-27 06:07:29 +05:00
0xCA 92333a08d8 Parse and validate subnet ranges 2023-12-27 06:07:29 +05:00
Vahid e73047b14f
Feature: Unix domain socket support (#492)
Co-authored-by: Khanh Ngo <k@ndk.name>
2023-12-25 20:31:11 +01:00
0xCA 47fac2b49b
Fixed tag input being too small and unable to fit a CIDR (#483)
Co-authored-by: 0xCA <undefined>
2023-12-25 20:25:38 +01:00
nebulosa2007 c8623082fe
Make Interface PreDown setting. (#480) 2023-12-25 20:23:51 +01:00
Michael Walter af7742bfb3
Update routes.go (#475)
use config file download mime type "txt/conf" to prevent downloaded configs being saved as <filename>.txt, instead of wanted <filename>.conf.
Tested on Android Firefox and Chrome
2023-12-25 20:22:42 +01:00
Gabriel Soares e2e1159ef4
add endpoint field to client (#470) 2023-12-25 20:21:37 +01:00
Cameron 585b55c2ee
fix: handle os.chmod errors (#457) 2023-12-25 20:17:31 +01:00
Marcus Wichelmann 13a4c05ff5
fix: add basic server-side input validation (#435)
This mitigates possible path traversal attacks by using
e.g. "../user" as a user name.
2023-12-25 20:07:47 +01:00
Marcus Wichelmann a06bce88e0
fix: add content-type check to user management routes to mitigate CSRF (#427) 2023-12-25 20:03:29 +01:00
Cameron 3024d36d76
env variable file support (#391) 2023-12-25 19:58:31 +01:00
Khanh Ngo b55543f424
fix: set random session secret if not set (#417) 2023-08-11 11:48:51 +02:00
Paul Dee 364a43e3dc
Implement updating a client Pub+PSK when editing a client (#401)
This covers the normal use-case where clients generate keys
locally on their device and notify the server of their new/updated keys.

The server verifies Preshared and Public keys independently of each
other. Should a client generate a new tunnel which lacks a PSK and send
only a Public key to the server (admin) where the earlier server created
profile has a Preshared key, the server admin/user must determine the
course of action:
keep or remove the PSK.
2023-08-11 10:34:11 +02:00
Cameron 7488f283c4
secure jsondb user perms (#404) 2023-08-11 10:25:56 +02:00
Hoang Nguyen 6bbe230fe8
[Vulnerability] Cross site scripting (XSS) and Open Redirect on the login page (#396) 2023-06-23 09:42:39 +02:00
Gabriel Klavans 28f3e820f0
Remove duplicate env var entry (#392) 2023-06-22 21:51:38 +02:00
A A R I X b9e5ddf194
Added BIND_ADDRESS environment variable to the project README (#384) 2023-06-06 21:11:43 +02:00
Khanh Ngo 39324c5cf9
Add .gitattributes 2023-06-06 21:09:12 +02:00
Khanh Ngo 346e3bd3b8
chore: remove healthcheck from Dockerfile (#382) 2023-06-03 10:40:24 +02:00
Khanh Ngo 8ac33a0278
GHA fixes 2023-05-24 21:21:44 +02:00
Khanh Ngo 5183bb5093
GHA fixes 2023-05-24 18:07:50 +02:00
Khanh Ngo 745141c752
GHA fixes 2023-05-24 18:00:48 +02:00
Khanh Ngo 19527ef1e0
GHA fixes 2023-05-24 17:58:20 +02:00
Khanh Ngo 86e52c5868
Add docker build workflow 2023-05-24 17:51:44 +02:00
Khanh Ngo f3ed766bc4
Update stale.yml 2023-05-24 12:08:12 +02:00
andycandy-de e9357d83e2
Added Table to global settings (#308) 2023-05-24 12:06:05 +02:00
djarbz 59133327de
Healthcheck: account for custom bind port (#295) 2023-05-24 12:05:27 +02:00
ByteDream ec757286c5
Hide user settings if login is disabled (#356) (#361) 2023-05-24 12:04:02 +02:00
Paul Dee cfbdae7abb
Follow-up fix for fwmark 101b5564c2 (#372)
Remove all FwMark settings from client configs (illegal) and QRcode
(also illegal).
2023-05-24 12:02:07 +02:00
Khanh Ngo ac99317ba3
Update README.md 2023-03-17 09:53:57 +01:00
Khanh Ngo 5e0217db04
Set password type field 2023-03-16 16:25:38 +01:00
Khanh Ngo d3c47c53c8 QR code fixes 2023-03-16 09:09:48 +01:00
Khanh Ngo 00f7f3d280 Style fixes 2023-03-16 08:58:28 +01:00
ByteDream 4fc52b62d2
Replace go.rice with native go embedding (#331) 2023-03-16 08:40:04 +01:00
Khanh Ngo e3e3639443 Bracket fixes 2023-03-15 21:50:46 +01:00
Arminas c8240fe157
fixed about page not showing menu items (#343) 2023-03-15 21:45:46 +01:00
Matze abef29bf17
better error-handling if no public IP could be detected (#323) 2023-03-15 21:41:46 +01:00
Paul Dee 814093cdd3
Stamp git commit into docker builds. (#325) 2023-03-15 21:39:20 +01:00
Paul Dee b80c44af43
Fix for fwmark (#279) 2023-03-15 21:37:39 +01:00
ByteDream b8341dd36f
Add docker-compose examples (#339) 2023-03-15 21:35:57 +01:00
ByteDream 7b848c841f
Disable cgo on release ci (#334) 2023-03-15 21:30:18 +01:00
ByteDream 3d59c7d0de
Add log levels (#332) 2023-03-15 21:29:08 +01:00