7 Commits

Include renames

Author	SHA1	Message	Date
clawbot	8ec04fdadb	feat: add Gitea Actions CI for make check (closes #96) ... - Add .gitea/workflows/check.yml running make check on PRs and pushes to main - Fix .golangci.yml for golangci-lint v2 config format (was using v1 keys) - Migrate linters-settings to linters.settings, remove deprecated exclude-use-default - Exclude gosec false positives (G117, G703, G704, G705) with documented rationale - Increase lll line-length from 88 to 120 (88 was too restrictive for idiomatic Go) - Increase dupl threshold from 100 to 150 (similar CRUD handlers are intentional) - Fix funcorder: move RemoveImage before unexported methods in docker/client.go - Fix wsl_v5: add required blank line in deploy.go - Fix revive unused-parameter in export_test.go - Fix gosec G306: tighten test file permissions to 0600 - Add html.EscapeString for log output, filepath.Clean for log path - Remove stale //nolint:funlen directives no longer needed with v2 config	2026-02-19 20:29:21 -08:00
clawbot	3f499163a7	fix: cancel in-progress deploy when webhook triggers new deploy (closes #38) ... When a webhook-triggered deploy starts for an app that already has a deploy in progress, the existing deploy is now cancelled via context cancellation before the new deploy begins. This prevents silently lost webhook deploys. Changes: - Add per-app active deploy tracking with cancel func and done channel - Deploy() accepts cancelExisting param: true for webhook, false for manual - Cancelled deployments are marked with new 'cancelled' status - Add ErrDeployCancelled sentinel error - Add DeploymentStatusCancelled model constant - Add comprehensive tests for cancellation mechanics	2026-02-15 22:12:03 -08:00
clawbot	72786a9feb	fix: use hashed webhook secrets for constant-time comparison ... Store a SHA-256 hash of the webhook secret in a new webhook_secret_hash column. FindAppByWebhookSecret now hashes the incoming secret and queries by hash, eliminating the SQL string comparison timing side-channel. - Add migration 005_add_webhook_secret_hash.sql - Add database.HashWebhookSecret() helper - Backfill existing secrets on startup - Update App model to include WebhookSecretHash in all queries - Update app creation to compute hash at insert time - Add TestHashWebhookSecret unit test - Update all test fixtures to set WebhookSecretHash Closes #13	2026-02-15 14:06:53 -08:00
sneak	c4362c3143	Add commit URL to Slack notifications with link and backtick formatting ... - Add commit_url column to webhook_events and deployments tables - Extract commit URL from webhook payload (from commit object or repo URL) - Format Slack messages with backticks for branch and commit SHA - Link commit SHA to the actual commit URL on the git server - Keep plain text format for ntfy notifications	2025-12-31 16:29:22 -08:00
sneak	bc275f7b9c	Add TCP/UDP port mapping support ... - Add app_ports table for storing port mappings per app - Add Port model with CRUD operations - Add handlers for adding/deleting port mappings - Add ports section to app detail template - Update Docker client to configure port bindings when creating containers - Support both TCP and UDP protocols	2025-12-30 12:11:57 +07:00
sneak	dc6500eac6	Fix repository cloning when running inside a container ... Use DataDir/builds instead of /tmp for clone directories so that bind mounts work correctly when upaas itself runs in a Docker container. The /tmp directory inside the upaas container isn't accessible to the Docker daemon on the host, causing bind mount failures. Also fix test setups to pass Config to deploy service and add delay to webhook test to avoid temp directory cleanup race with async deployment goroutine.	2025-12-29 17:02:01 +07:00
sneak	3f9d83c436	Initial commit with server startup infrastructure ... Core infrastructure: - Uber fx dependency injection - Chi router with middleware stack - SQLite database with embedded migrations - Embedded templates and static assets - Structured logging with slog Features implemented: - Authentication (login, logout, session management, argon2id hashing) - App management (create, edit, delete, list) - Deployment pipeline (clone, build, deploy, health check) - Webhook processing for Gitea - Notifications (ntfy, Slack) - Environment variables, labels, volumes per app - SSH key generation for deploy keys Server startup: - Server.Run() starts HTTP server on configured port - Server.Shutdown() for graceful shutdown - SetupRoutes() wires all handlers with chi router	2025-12-29 15:46:03 +07:00