sneak 8b0854ccb7 Name every rate limit that shares the client key ...

"Trusted proxies" now says a block covering clients makes every rate
limit bypassable, not "all three"; Rate Limiting lists delivery replay
and event resubmit among the limiters sharing the key. The
Configuration table and the TrustedProxies comment say a private
client behind a trusted proxy chooses its key, not behind any proxy.

Model: opus-5-5

2026-10-01 20:01:45 +00:00

..

banner

Add a webhooker resetpw subcommand and a bootstrap banner (closes #208) (#239)

2026-08-20 08:01:42 +02:00

ciscript

Mark superseded commits honestly instead of skipped (closes #152)

2026-08-18 00:31:55 +02:00

config

Name every rate limit that shares the client key

2026-10-01 20:01:45 +00:00

database

Bound username length at creation (closes #184)

2026-10-01 21:38:48 +02:00

datadir

Consolidate the data directory mode into one owner (closes #288)

2026-09-21 10:01:51 +02:00

delivery

Default-block Azure WireServer's public address (closes #245)

2026-09-29 10:22:07 +02:00

globals

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00

gormlog

Log SQL with placeholders, never bound values (closes #207) (#222)

2026-08-20 07:20:59 +02:00

handlers

Trust the RFC 1918 ranges as proxies when TRUSTED_PROXIES is unset (closes #333)

2026-10-01 20:01:45 +00:00

healthcheck

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00

lifecycle

Set fx.StopTimeout inside the container stop grace (closes #134)

2026-08-18 00:12:51 +02:00

logfield

Route GORM's logger through slog and bound it (closes #178)

2026-08-18 07:17:43 +02:00

logger

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00

metrics

Resubmit a stored event as a new undelivered event (closes #250)

2026-08-24 00:53:37 +02:00

middleware

Say the proxy is covered by default or by a set value

2026-10-01 20:01:45 +00:00

reqtls

Default WEBHOOKER_ENVIRONMENT to prod (closes #307)

2026-09-28 12:47:31 +02:00

resetpw

Add an egress CIDR allowlist to the SSRF guard (closes #204) (#217)

2026-08-20 10:34:42 +02:00

server

Trust the RFC 1918 ranges as proxies when TRUSTED_PROXIES is unset (closes #333)

2026-10-01 20:01:45 +00:00

session

Let a browser with cookies from an earlier database log in (closes #359)

2026-09-29 12:58:44 +02:00

versionscript

Stamp the build version into the binary (closes #253)

2026-08-24 03:15:20 +02:00