sneak/upaas
1
0
Fork 0
Code Issues 14 Pull Requests 2 Actions Packages Projects Releases Wiki Activity
123 Commits 23 Branches 0 Tags 1.7 MiB
b05f8eae43
Commit Graph

6 Commits

Author SHA1 Message Date
clawbot
c729fdc7b3 fix: resolve gosec G117 secret pattern lint issues 
- Add json:"-" tags to SessionSecret and PrivateKey fields
- Replace login request struct with map[string]string to avoid
  exported field matching secret pattern in JSON key
 2026-02-20 02:50:31 -08:00
clawbot
02847eea92 fix: restrict CORS to configured origins (closes #40) 
- Add CORSOrigins config field (UPAAS_CORS_ORIGINS env var)
- Default to same-origin only (no CORS headers when unconfigured)
- When configured, allow specified origins with AllowCredentials: true
- Add tests for CORS middleware behavior
 2026-02-19 13:45:18 -08:00
sneak
b3ac3c60c2 Add deployment improvements and UI enhancements 
- Clone specific commit SHA from webhook instead of just branch HEAD
- Log webhook payload in deployment logs
- Add build/deploy timing to ntfy and Slack notifications
- Implement container rollback on deploy failure
- Remove old container only after successful deployment
- Show relative times in deployment history (hover for full date)
- Update port mappings UI with labeled text inputs
- Add footer with version info, license, and repo link
- Format deploy key comment as upaas_DATE_appname
 2025-12-30 15:05:26 +07:00
sneak
219a561473 Use PORT instead of UPAAS_PORT for listen port 2025-12-29 16:15:05 +07:00
sneak
dce898bbdb Auto-generate and persist session secret on first startup 
- Generate random 32-byte session secret if not set via env var
- Persist to $UPAAS_DATA_DIR/session.key for container restarts
- Load existing secret from file on subsequent startups
- Change container data directory to /var/lib/upaas
 2025-12-29 16:12:30 +07:00
sneak
3f9d83c436 Initial commit with server startup infrastructure 
Core infrastructure:
- Uber fx dependency injection
- Chi router with middleware stack
- SQLite database with embedded migrations
- Embedded templates and static assets
- Structured logging with slog

Features implemented:
- Authentication (login, logout, session management, argon2id hashing)
- App management (create, edit, delete, list)
- Deployment pipeline (clone, build, deploy, health check)
- Webhook processing for Gitea
- Notifications (ntfy, Slack)
- Environment variables, labels, volumes per app
- SSH key generation for deploy keys

Server startup:
- Server.Run() starts HTTP server on configured port
- Server.Shutdown() for graceful shutdown
- SetupRoutes() wires all handlers with chi router
 2025-12-29 15:46:03 +07:00