sneak 70e708ee4f Say the proxy is covered by default or by a set value ...

The rate-limit test comments on trustedProxyCIDR and forwardedKeyFor
said production needs TRUSTED_PROXIES set; another said only
operator-listed addresses are trusted. The README's Rate Limiting
paragraph said "listed in", and the login endpoint section assumed
every proxied deployment shares one bucket. All now match the
RFC 1918 default.

Model: opus-5-5

2026-10-01 20:01:45 +00:00

..

banner

Add a webhooker resetpw subcommand and a bootstrap banner (closes #208) (#239)

2026-08-20 08:01:42 +02:00

ciscript

Mark superseded commits honestly instead of skipped (closes #152)

2026-08-18 00:31:55 +02:00

config

Say that any private-addressed client can choose its rate-limit key

2026-10-01 20:01:45 +00:00

database

Bound username length at creation (closes #184)

2026-10-01 21:38:48 +02:00

datadir

Consolidate the data directory mode into one owner (closes #288)

2026-09-21 10:01:51 +02:00

delivery

Default-block Azure WireServer's public address (closes #245)

2026-09-29 10:22:07 +02:00

globals

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00

gormlog

Log SQL with placeholders, never bound values (closes #207) (#222)

2026-08-20 07:20:59 +02:00

handlers

Trust the RFC 1918 ranges as proxies when TRUSTED_PROXIES is unset (closes #333)

2026-10-01 20:01:45 +00:00

healthcheck

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00

lifecycle

Set fx.StopTimeout inside the container stop grace (closes #134)

2026-08-18 00:12:51 +02:00

logfield

Route GORM's logger through slog and bound it (closes #178)

2026-08-18 07:17:43 +02:00

logger

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00

metrics

Resubmit a stored event as a new undelivered event (closes #250)

2026-08-24 00:53:37 +02:00

middleware

Say the proxy is covered by default or by a set value

2026-10-01 20:01:45 +00:00

reqtls

Default WEBHOOKER_ENVIRONMENT to prod (closes #307)

2026-09-28 12:47:31 +02:00

resetpw

Add an egress CIDR allowlist to the SSRF guard (closes #204) (#217)

2026-08-20 10:34:42 +02:00

server

Trust the RFC 1918 ranges as proxies when TRUSTED_PROXIES is unset (closes #333)

2026-10-01 20:01:45 +00:00

session

Let a browser with cookies from an earlier database log in (closes #359)

2026-09-29 12:58:44 +02:00

versionscript

Stamp the build version into the binary (closes #253)

2026-08-24 03:15:20 +02:00