spatiumstas
2d5ea3fa08
fix: preserve status alerts through pending recovery ( #2375 )
2026-09-22 19:14:54 -04:00
Sven van Ginkel
627d364071
fix(ui): disable Add Monitor button when no eligible systems exist ( #2392 )
2026-09-22 19:04:48 -04:00
Sven van Ginkel
8047f005d4
fix(ui): preserve paused systems in network monitors table ( #2391 )
2026-09-22 18:40:46 -04:00
Sven van Ginkel
4a4610bbc3
fix(ui): reflect target response status in network monitor status dot ( #2390 )
...
Co-authored-by: henrygd <hank@henrygd.me >
2026-09-22 18:12:19 -04:00
Sven van Ginkel
c9de35fad2
feat: change network packet loss to a red line ( #2377 )
2026-09-21 14:49:11 -04:00
henrygd
a5f216f425
exit 0 without key on Windows to avoid Winget Validation-Executable-Error ( #2376 , #2247 )
2026-09-21 11:27:37 -04:00
henrygd
97e6f64bdc
fix(ui): swap usage chart shown twice in tabs view ( #2356 )
2026-09-19 13:27:00 -04:00
henrygd
c52f3acb94
fix(docker): enable Debian contrib for ZFS utilities in slim NVIDIA image
2026-09-19 12:03:05 -04:00
henrygd
a0dc19eacf
fix(ui): sort containers alphabetically within systems
2026-09-19 11:18:17 -04:00
henrygd
912bc50874
docker: update alpine version and remove unnecessary GOGC
2026-09-19 00:19:02 -04:00
henrygd
c54dbfba7c
test: wait for hub setup in universal token integration test
2026-09-19 00:14:19 -04:00
henrygd
dd3f7d58b5
test: use virtual time to eliminate MQTT notification timeout waits
2026-09-19 00:10:02 -04:00
henrygd
0509053a69
test: wait for hub system status in agent WebSocket integration test
2026-09-19 00:02:29 -04:00
henrygd
187dc886a9
fix: resync network monitors after SSH reconnect and retry failed syncs
2026-09-18 23:49:54 -04:00
henrygd
b0bc727411
update migration files for 0.20.0
2026-09-18 18:51:42 -04:00
hank
bd7e359dcd
New Crowdin updates ( #2352 )
2026-09-18 18:28:28 -04:00
henrygd
f7fd3ef403
force oauth created users to start with user role
2026-09-18 17:10:37 -04:00
henrygd
db3afeabd9
i18n: update translations
2026-09-18 14:34:16 -04:00
henrygd
b347599928
update translation strings
2026-09-18 14:00:20 -04:00
hank
6e5440c21f
New Crowdin updates ( #2323 )
2026-09-18 13:40:00 -04:00
hank
bb1b39928e
feat: network monitoring from agents ( #2266 , #1911 )
...
Co-authored-by: Sven van Ginkel <svenvanginkel@icloud.com >
Co-authored-by: xiaomiku01 <xiaomiku01@outlook.com >
2026-09-18 13:22:50 -04:00
José M. Requena Plens
4bf70700f2
feat(hub): add TRUSTED_PROXY_IPS allowlist for TRUSTED_AUTH_HEADER ( #2327 )
...
With TRUSTED_AUTH_HEADER set, the hub authenticates a request from the
header alone, whichever address it comes from. That is right when every
request passes through the reverse proxy, and not when the hub can also
be reached directly: anyone who can reach it sets the header themselves.
TRUSTED_PROXY_IPS takes a comma-separated list of IPs or CIDR ranges.
When set, the header is only honored on requests whose peer address is
in the list; other requests fall through to the normal authentication.
When unset, nothing changes.
The check uses the connection's RemoteAddr, not a forwarded header, so
the list names the proxy itself. IPv4-mapped IPv6 entries are treated as
IPv4. Entries that do not parse are skipped with a warning on the
console; a list with no valid entry trusts nobody, so a typo narrows the
allowlist instead of widening it.
2026-09-17 13:48:46 -04:00
Sven van Ginkel
f0f1f7985c
feat: persist view preferences and language to user settings ( #1831 )
...
Co-authored-by: ChangkeunJ <reiot92@gmail.com >
2026-09-16 20:29:36 -04:00
Luís Palma
50f6fc075d
Merge commit from fork
...
* fix: make first-user bootstrap atomic
* add tests
---------
Co-authored-by: henrygd <hank@henrygd.me >
2026-09-16 20:13:32 -04:00
henrygd
a0bf338796
hub: raise max batch requests and lower max batch body size
2026-09-16 19:39:07 -04:00
Petr Rajtslegr
6a7b2772d9
fix(site): switch theme live when system preference changes ( #2328 )
...
Listen for prefers-color-scheme changes in ThemeProvider and expose resolvedTheme so the login border color follows the active theme without a hard refresh.
2026-09-13 12:40:21 -04:00
David Jang
086091a0fe
fix(site): discard pending history when switching to live charts ( #2333 )
2026-09-13 12:32:04 -04:00
Bruno Bousquet
f204dc17e6
feat(agent): Add docker image update available flag ( #2211 )
...
Co-authored-by: henrygd <hank@henrygd.me >
2026-09-10 19:39:40 -04:00
henrygd
6d82ee70b1
chore: replace google/uuid with new go uuid package
2026-09-10 10:39:11 -04:00
henrygd
bb270e02a8
i18n: add translations for new strings and remove source matching translations
2026-09-09 20:53:52 -04:00
hank
312c109138
i18n: New Crowdin updates ( #2322 )
2026-09-09 20:34:47 -04:00
henrygd
c938368089
i18n: update translation strings
2026-09-09 20:27:22 -04:00
Ani Betts
8d6a5d5f6e
feat(agent): report btrfs filesystems as storage pools ( #2315 )
...
Co-authored-by: henrygd <hank@henrygd.me >
2026-09-09 19:53:39 -04:00
henrygd
98687be2f2
fix(hub): reject null systemd service entries to prevent hub panic
2026-09-08 10:08:33 -04:00
henrygd
e39e153ca0
fix(hub): prevent readonly users listing tokens of their shared systems via api
2026-09-08 09:57:58 -04:00
Santhi Prakash
5b87f7d7cb
fix(hub): always clear auth store when encountring 4xx after token expires ( #2310 )
...
Co-authored-by: henrygd <hank@henrygd.me >
2026-09-08 08:21:00 -04:00
hank
9a0aa5a89e
fix: prevent possible dns rebinding for alert notifications directing to internal sevices ( #2314 )
...
- Validate resolved IPs immediately before connecting.
- Guard Shoutrrr requests during initialization and delivery.
- Require admins for services without HTTP client support.
- Test DNS rebinding, redirects, internal hosts, and authorization.
- Upgrade Shoutrrr to 0.20.0 to support custom dialcontext
2026-09-08 08:05:47 -04:00
henrygd
997adc19bb
fix: show idle GPU utilization in systems table ( #2312 )
2026-09-07 13:13:05 -04:00
Sven van Ginkel
08d813620c
Add ZFS pool/dataset utilities (zpool, zfs) to the full and slim nvidia agent images ( #2311 )
2026-09-07 11:05:02 -04:00
henrygd
6cb302fcf6
fix(hub): bound realtime metric fetching and enforce access control by system
...
- synchronize realtime subscription state
- prevent overlapping fetches per system
- add realtime worker lifecycle tests
- reject subscriptions without system access
- test access revocation and shared-system permissions
2026-09-06 13:24:53 -04:00
Matthew D'Souza
ad24484caa
feat(site): display NVMe data units as human-readable GB/TB ( #2303 )
2026-09-05 14:44:03 -04:00
henrygd
c157c2026d
fix(agent): include root CA certificates in base image ( #2291 )
2026-09-03 14:32:59 -04:00
Arno
e1d9ebc61d
chore: add zfs tools to intel agent image ( #2288 )
2026-09-03 14:19:49 -04:00
henrygd
ffcdb04167
i18n: update locale files
2026-09-03 11:22:37 -04:00
hank
a8def47018
i18n: New Crowdin updates ( #2284 )
2026-09-02 18:06:01 -04:00
henrygd
3d8fc39e94
update dev version and finalize migration file for 0.19.0
2026-09-02 18:00:40 -04:00
Santhi Prakash
5790fbecce
fix: GPU Power Draw chart renders full-width instead of half-width ( #2269 )
2026-09-02 17:09:32 -04:00
hank
f9309da9f0
i18n: New Crowdin updates ( #2283 )
2026-09-02 15:37:11 -04:00
henrygd
7d97b0d23a
i18n: update locale files and source strings
2026-09-02 14:57:37 -04:00
henrygd
a1ca51608a
fix: add singleDesc back to container alert
2026-09-02 13:09:27 -04:00