6cd1bc8320
fix(ssh): show why sessions fail, support check rules and connect once
2026-10-19 16:16:03 -07:00
6209174f15
docs: keep the testing guide next to the tests
2026-10-19 12:28:11 -07:00
a1d15bf049
test: drop the fake Headscale and test routes against the real one
2026-10-19 12:24:53 -07:00
8322de9ebc
test(fake): model only what unit tests use
2026-10-19 12:24:50 -07:00
e433d4388c
docs: describe the test app, contract, and harness
2026-10-19 12:24:44 -07:00
fc6f6ce4f6
fix(docs): move the version picker next to the header controls
2026-10-19 11:53:38 -07:00
2e01fa3200
docs: rewrite the docs and version them ( #668 )
2026-10-19 11:48:26 -07:00
b19c638c3a
fix: restart headscale for config changes instead of sighup ( #667 )
2026-10-18 16:01:07 -07:00
ab271808a6
chore(ui): sweep dialog copy and rename pre-auth keys to auth keys
2026-10-16 09:39:35 -07:00
28a4cf4384
feat(ui): move browser ssh pages onto the sign-in layout
2026-10-16 09:29:57 -07:00
70e876d739
feat: rework linking logic
2026-10-15 14:25:39 -07:00
1c34929e10
feat(ui): redesign settings with a sidebar
2026-10-14 22:43:15 -07:00
512827d16c
feat(ui): add semantic color tokens
2026-10-13 20:56:59 -07:00
d1c4c1d34d
docs: point the native prerequisites at v0.8.0
2026-10-13 11:12:48 -07:00
381ba4fb25
fix(config): Added config.oidc.jwks_endpoint ( #620 )
2026-09-28 23:57:01 -07:00
f06f5947fc
Correct native build prerequisites and document the complete build ( #633 )
...
Co-authored-by: root <root@codex.local >
2026-09-28 23:56:08 -07:00
72ea6aa0b3
feat(ui): structured editor for ACL rules, tags and groups ( #608 )
2026-08-28 12:58:06 -07:00
5515b4bc02
feat: clamp docker daemon version and support v1.24
...
Fixes HP-563.
2026-08-25 14:14:33 -07:00
a5b6ecf28e
fix(agent): allow disabling Tailscale netns ( #618 )
2026-08-24 22:04:15 -07:00
e1f9db4c4e
Fix restty links across docs pages ( #595 )
2026-08-18 21:39:38 -04:00
b3c0c1c691
fix(agent): always spawn agent with pre-auth key and auto-approve
...
- Generate a fresh pre-auth key for every agent startup
- Preserve existing tailscale state to avoid creating a new host
- Auto-approve pending auth requests via /api/v1/auth/approve
- Show approval link in settings UI as fallback
Closes HP-558
2026-07-13 11:00:43 -04:00
990e1e9ff5
chore(ssh): warn about broken SSH on certain versions
2026-07-01 11:23:35 -04:00
0439175e73
feat(auth): support role sync on re-login
2026-06-22 16:40:29 -04:00
10055541cc
feat(config): simplify required headscale config
2026-06-22 16:40:29 -04:00
0c4d175eb7
feat(auth): support deriving roles from the IDP
...
Closes HP-352.
2026-06-20 11:53:09 -04:00
96f2721272
feat(auth): support reverse-proxy driven proxy auth
...
Closes HP-353.
2026-06-20 11:41:44 -04:00
3252482e0b
feat: switch logging to pino
...
Closes HP-279
2026-06-17 15:58:48 -04:00
2f3a440de5
fix: auto read dns.extra_records_path instead of making it required
...
Closes HP-538
2026-06-17 11:11:20 -04:00
775b81a7fa
feat: support multiple CAs through documentation
2026-05-31 14:38:10 -04:00
b95d601ff6
feat: automate health check with a written file
2026-05-30 20:45:15 -04:00
ea27c846e2
feat: add support for https
2026-05-30 19:39:02 -04:00
30b528c491
docs(install): use CMD prefix in Docker healthcheck example
...
Docker Compose requires the test array to start with NONE, CMD, or CMD-SHELL.
The previous example was missing the prefix, so Compose treated the binary
path as the shell command, the healthcheck was rejected, and the container
was marked unhealthy — which causes Traefik (and similar) to skip it.
Closes #535
Amp-Thread-ID: https://ampcode.com/threads/T-019e7ae4-6862-760c-a3e7-239350eab71d
Co-authored-by: Amp <amp@ampcode.com >
2026-05-30 18:47:57 -04:00
d7f1d665a4
feat: bump headscale minimum to 0.27
2026-05-30 17:32:00 -04:00
0512565f8e
feat: replace openapi hashing system with /version
...
Apparently I didn't use my brain cells and rely on the /version
endpoint that Headscale has exposed since 0.26 (our lowest supported
version). Switching to that significantly simplifies the API surface.
2026-05-25 11:51:02 -04:00
5a2098eea5
chore: format everything with oxfmt
2026-04-26 20:38:45 -04:00
b961b339bb
feat: add support for OIDC logouts
...
Closes HP-407.
2026-04-26 20:36:52 -04:00
9e5e5a613a
fix: harden OIDC weak RSA fallback
2026-04-22 00:07:47 +08:00
d110dd2bcb
feat: add OIDC subject claim fallbacks
2026-04-16 18:07:57 +08:00
e4030ed254
docs: deploy stable and beta docs
2026-04-11 14:32:21 -04:00
1961608e12
docs: get rid of deleted png
2026-04-09 22:01:34 -04:00
0f19fdf0da
feat: rebuild browser ssh from the ground up
2026-04-09 21:56:42 -04:00
44dffeaff0
fix: patch tailscale to support a custom DERP port
2026-04-07 00:24:50 -04:00
003985d192
docs: document the modular architecture for services
2026-04-03 16:36:52 -04:00
a5e2af9b30
docs: update some option docs
2026-03-29 20:31:20 -04:00
ee59a2d06d
feat: switch agent to a periodic dump rather than long running process
2026-03-27 13:32:59 -04:00
fc9df0c536
docs: openssl rand takes byte count, not character
2026-03-18 13:21:48 +01:00
f0df663c90
[dev/tooling]: add basic devcontainer setup w/ node, pnpm, go, nix & recommended tools
...
Add a development container for contributors and document how to use it.
- Add .devcontainer/devcontainer.json
- Add .devcontainer/Dockerfile
- Update docs/CONTRIBUTING.md with Dev Container section
- devcontainer.json parses successfully and opens in vscode without issues
- all build.sh variants, recommended tools & lint/typecheck run without issues
Closes #499
2026-03-15 18:55:18 +00:00
45984ec639
chore: remove deprecated oidc.user_storage_file option
...
The flat-file user store has been deprecated for several versions.
All user data now lives in the SQL database. Removes the config field,
nix option, docs, and migration logic.
Co-authored-by: Amp <amp@ampcode.com >
Amp-Thread-ID: https://ampcode.com/threads/T-019cce57-c9e1-7732-9709-8288127573a9
2026-03-08 17:34:49 -04:00
0f8e192b5c
feat: initial auth rework
2026-03-07 17:10:34 -05:00
6d70497758
revert: remove this useless contribution
2026-03-07 15:15:05 -05:00
Aarnav Tale