SaelixCode 50df5b3c02 fix(security): explicitly disable upgrade-insecure-requests via Helmet 8 API ...

Helmet 8 merges custom directives with its built-in defaults, which
include upgrade-insecure-requests. Simply omitting the directive from
the custom object (PR #59) was insufficient — Helmet silently re-adds
it from defaults. Setting upgradeInsecureRequests: null is the correct
Helmet 8 API to remove a default directive.

This was the root cause of the persistent blank page on plain-HTTP
self-hosted deployments: the directive tells browsers to upgrade all
HTTP sub-resource fetches to HTTPS, producing ERR_SSL_PROTOCOL_ERROR
on every JS/CSS asset.

2026-03-22 17:26:08 -04:00

.github/workflows

ci: restructure pipeline into parallel jobs with E2E, Docker validation, and auditing

2026-03-22 00:48:49 -04:00

backend

fix(security): explicitly disable upgrade-insecure-requests via Helmet 8 API

2026-03-22 17:26:08 -04:00

e2e

fix(e2e): fill api_token in nodes tests so submit button is enabled

2026-03-22 01:58:47 -04:00

frontend

fix(proxy): prevent remote 401 from triggering local session logout

2026-03-22 16:43:06 -04:00

.dockerignore

feat: add HostConsole component for interactive terminal access and integrate into EditorLayout

2026-02-26 19:52:43 -05:00

.env.example

Initial commit: Sencho V1 complete with Auth and Dockerization

2026-02-20 18:39:32 -05:00

.gitattributes

fix(docker): add entrypoint for volume permission handling

2026-03-22 15:16:34 -04:00

.gitignore

chore: ignore local Claude Code, Playwright MCP, and plans files

2026-03-19 23:16:17 -04:00

CHANGELOG.md

fix(security): explicitly disable upgrade-insecure-requests via Helmet 8 API

2026-03-22 17:26:08 -04:00

docker-compose.yml

feat: enhance environment file handling by resolving multiple env files and adding selection functionality in the editor

2026-03-03 19:13:28 -05:00

docker-entrypoint.sh

fix(docker): repair broken entrypoint from bad merge conflict resolution

2026-03-22 16:08:50 -04:00

Dockerfile

fix(docker): repair broken entrypoint from bad merge conflict resolution

2026-03-22 16:08:50 -04:00

package-lock.json

security: pre-release hardening, automated testing, and production readiness

2026-03-21 21:59:44 -04:00

package.json

security: pre-release hardening, automated testing, and production readiness

2026-03-21 21:59:44 -04:00

playwright.config.ts

fix(e2e): get all E2E tests passing and fix AlertDialog crash on delete

2026-03-21 23:58:46 -04:00

S

Description

Self-hosted Docker Compose management platform. Great for homelabs, small DevOps teams, and platform engineers.

docker-composedocker-deploymentdocker-stackdocker-stack-deploydocker-uiself-hostedselfhostedwebsocket

AGPL-3.0 188 MiB

Languages

TypeScript 99.2%

JavaScript 0.4%

CSS 0.3%

Dockerfile 0.1%