990e1e9ff5
chore(ssh): warn about broken SSH on certain versions
2026-07-01 11:23:35 -04:00
0439175e73
feat(auth): support role sync on re-login
2026-06-22 16:40:29 -04:00
10055541cc
feat(config): simplify required headscale config
2026-06-22 16:40:29 -04:00
0c4d175eb7
feat(auth): support deriving roles from the IDP
...
Closes HP-352.
2026-06-20 11:53:09 -04:00
96f2721272
feat(auth): support reverse-proxy driven proxy auth
...
Closes HP-353.
2026-06-20 11:41:44 -04:00
3252482e0b
feat: switch logging to pino
...
Closes HP-279
2026-06-17 15:58:48 -04:00
2f3a440de5
fix: auto read dns.extra_records_path instead of making it required
...
Closes HP-538
2026-06-17 11:11:20 -04:00
775b81a7fa
feat: support multiple CAs through documentation
2026-05-31 14:38:10 -04:00
b95d601ff6
feat: automate health check with a written file
2026-05-30 20:45:15 -04:00
ea27c846e2
feat: add support for https
2026-05-30 19:39:02 -04:00
30b528c491
docs(install): use CMD prefix in Docker healthcheck example
...
Docker Compose requires the test array to start with NONE, CMD, or CMD-SHELL.
The previous example was missing the prefix, so Compose treated the binary
path as the shell command, the healthcheck was rejected, and the container
was marked unhealthy — which causes Traefik (and similar) to skip it.
Closes #535
Amp-Thread-ID: https://ampcode.com/threads/T-019e7ae4-6862-760c-a3e7-239350eab71d
Co-authored-by: Amp <amp@ampcode.com >
2026-05-30 18:47:57 -04:00
d7f1d665a4
feat: bump headscale minimum to 0.27
2026-05-30 17:32:00 -04:00
0512565f8e
feat: replace openapi hashing system with /version
...
Apparently I didn't use my brain cells and rely on the /version
endpoint that Headscale has exposed since 0.26 (our lowest supported
version). Switching to that significantly simplifies the API surface.
2026-05-25 11:51:02 -04:00
5a2098eea5
chore: format everything with oxfmt
2026-04-26 20:38:45 -04:00
b961b339bb
feat: add support for OIDC logouts
...
Closes HP-407.
2026-04-26 20:36:52 -04:00
9e5e5a613a
fix: harden OIDC weak RSA fallback
2026-04-22 00:07:47 +08:00
d110dd2bcb
feat: add OIDC subject claim fallbacks
2026-04-16 18:07:57 +08:00
e4030ed254
docs: deploy stable and beta docs
2026-04-11 14:32:21 -04:00
1961608e12
docs: get rid of deleted png
2026-04-09 22:01:34 -04:00
0f19fdf0da
feat: rebuild browser ssh from the ground up
2026-04-09 21:56:42 -04:00
44dffeaff0
fix: patch tailscale to support a custom DERP port
2026-04-07 00:24:50 -04:00
003985d192
docs: document the modular architecture for services
2026-04-03 16:36:52 -04:00
a5e2af9b30
docs: update some option docs
2026-03-29 20:31:20 -04:00
ee59a2d06d
feat: switch agent to a periodic dump rather than long running process
2026-03-27 13:32:59 -04:00
fc9df0c536
docs: openssl rand takes byte count, not character
2026-03-18 13:21:48 +01:00
f0df663c90
[dev/tooling]: add basic devcontainer setup w/ node, pnpm, go, nix & recommended tools
...
Add a development container for contributors and document how to use it.
- Add .devcontainer/devcontainer.json
- Add .devcontainer/Dockerfile
- Update docs/CONTRIBUTING.md with Dev Container section
- devcontainer.json parses successfully and opens in vscode without issues
- all build.sh variants, recommended tools & lint/typecheck run without issues
Closes #499
2026-03-15 18:55:18 +00:00
45984ec639
chore: remove deprecated oidc.user_storage_file option
...
The flat-file user store has been deprecated for several versions.
All user data now lives in the SQL database. Removes the config field,
nix option, docs, and migration logic.
Co-authored-by: Amp <amp@ampcode.com >
Amp-Thread-ID: https://ampcode.com/threads/T-019cce57-c9e1-7732-9709-8288127573a9
2026-03-08 17:34:49 -04:00
0f8e192b5c
feat: initial auth rework
2026-03-07 17:10:34 -05:00
6d70497758
revert: remove this useless contribution
2026-03-07 15:15:05 -05:00
67b1611d13
Fix link to Headplane configuration file in docker.md
...
Updated the link to the completed configuration file for Headplane in the Docker installation documentation.
2026-03-02 21:02:27 +01:00
573dd7e52e
docs: fix nginx proxy_pass for "location /admin/" stanza
...
As-is, the nginx sample configuration maps the location from the
original URL (`/admin/`) to the location in the `pass_proxy` argument
`http://localhost:3000/ ` (`/`) .
Headplane does not have a route for `/`, so it returns a `404 Not Found`
with this configuration. Headplane _does_ have a route for `/admin/`. By
omitting the location portion of the `pass_proxy` argument, the location
from the original URL is used (c.f.
https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/#passing-a-request-to-a-proxied-server ),
serving up the correct content.
2026-01-25 18:37:31 -08:00
034ba25ce3
feat: switch to oxc linting/formatting
2026-01-15 22:09:58 -05:00
42ffe69486
feat: add docker health check
2026-01-13 22:54:11 -05:00
85a0f932a7
Update OIDC callback URL in SSO documentation
2025-12-21 19:07:39 +01:00
2ff5dd290f
docs: enable search
2025-12-05 15:38:36 -05:00
1463a8cc42
docs: go more indepth on sso setup
2025-12-05 15:38:16 -05:00
3a3e5ca65e
feat: pkce
2025-12-04 11:37:22 -05:00
3eff763436
docs: create initial sso page
2025-12-04 10:52:16 -05:00
afde3399e1
fix: docs build
2025-11-02 16:43:14 -05:00
ce4be73faf
feat: add a warning banner on the login page for misconfigured cookies
2025-11-02 13:54:45 -05:00
497a782f17
docs: fix link typo for configuration
2025-10-30 17:30:13 -04:00
df4d864838
docs: man why is this case sensitive
2025-10-16 22:30:15 -04:00
d175171efc
chore: document agent procedure
2025-10-16 22:16:11 -04:00
f44881b399
docs: update images
2025-10-16 21:56:04 -04:00
3b93f2fb61
chore: more docs cleanup/unification
2025-10-16 21:18:27 -04:00
1b2d7e305a
docs: new installation docs!
2025-10-16 21:03:40 -04:00
639e7e9c6b
fix: reorganize vitepress docs into /docs
2025-10-16 18:29:51 -04:00
eaffcd7b62
chore: refactor vitepress docs location
2025-10-12 22:03:13 -04:00
4ccc73d7e4
chore: cleanup docs a bit
2025-10-12 15:50:20 -04:00
361bc493c0
chore: pin vitepress to 2.0.0 and add sponsor link
2025-08-18 13:28:16 -04:00
Aarnav Tale