SaelixCode cf2946cfa6 fix(security): remove CSP upgrade-insecure-requests and HSTS over HTTP ...

Helmet's defaults are designed for HTTPS-only deployments. Two directives
were actively breaking plain-HTTP self-hosted instances:

- upgrade-insecure-requests: causes browsers to upgrade all JS/CSS/asset
  fetches to HTTPS → ERR_SSL_PROTOCOL_ERROR → completely blank page
- Strict-Transport-Security: permanently instructs browsers to refuse HTTP
  for 1 year, even after the header is removed from the server

Also handle docker socket GID=0 (root:root) edge case in entrypoint and
add [entrypoint] diagnostic log lines for easier debugging.

2026-03-22 15:42:48 -04:00

.github/workflows

ci: restructure pipeline into parallel jobs with E2E, Docker validation, and auditing

2026-03-22 00:48:49 -04:00

backend

fix(security): remove CSP upgrade-insecure-requests and HSTS over HTTP

2026-03-22 15:42:48 -04:00

e2e

fix(e2e): fill api_token in nodes tests so submit button is enabled

2026-03-22 01:58:47 -04:00

frontend

fix(dashboard): correct stale Stats reset with inactive field

2026-03-22 03:21:36 -04:00

.dockerignore

feat: add HostConsole component for interactive terminal access and integrate into EditorLayout

2026-02-26 19:52:43 -05:00

.env.example

Initial commit: Sencho V1 complete with Auth and Dockerization

2026-02-20 18:39:32 -05:00

.gitignore

chore: ignore local Claude Code, Playwright MCP, and plans files

2026-03-19 23:16:17 -04:00

CHANGELOG.md

fix(security): remove CSP upgrade-insecure-requests and HSTS over HTTP

2026-03-22 15:42:48 -04:00

docker-compose.yml

feat: enhance environment file handling by resolving multiple env files and adding selection functionality in the editor

2026-03-03 19:13:28 -05:00

docker-entrypoint.sh

fix(security): remove CSP upgrade-insecure-requests and HSTS over HTTP

2026-03-22 15:42:48 -04:00

Dockerfile

security: pre-release hardening, automated testing, and production readiness

2026-03-21 21:59:44 -04:00

package-lock.json

security: pre-release hardening, automated testing, and production readiness

2026-03-21 21:59:44 -04:00

package.json

security: pre-release hardening, automated testing, and production readiness

2026-03-21 21:59:44 -04:00

playwright.config.ts

fix(e2e): get all E2E tests passing and fix AlertDialog crash on delete

2026-03-21 23:58:46 -04:00

S

Description

Self-hosted Docker Compose management platform. Great for homelabs, small DevOps teams, and platform engineers.

docker-composedocker-deploymentdocker-stackdocker-stack-deploydocker-uiself-hostedselfhostedwebsocket

AGPL-3.0 177 MiB

Languages

TypeScript 99.2%

JavaScript 0.4%

CSS 0.3%

Dockerfile 0.1%