Commit Graph

539 Commits

Author SHA1 Message Date
Gan, Jimmy b1dee47126 Add CORS, rate limiting, security headers, and files endpoint protection 2026-02-21 11:18:29 +08:00
Gan, Jimmy 7b4c52f646 Fix CI: use --pull never instead of --no-pull 2026-02-21 11:16:07 +08:00
Gan, Jimmy 0c80e07735 Fix CI: remove checkout step that requires GitHub access 2026-02-21 11:14:04 +08:00
Gan, Jimmy 74a4fa1d4b Fix CI: add --no-pull to avoid Docker Hub pull failure 2026-02-21 11:09:52 +08:00
Gan, Jimmy a265c6ffb0 Use docker save/load for cross-build deploy from M1 to NAS 2026-02-21 11:05:00 +08:00
Gan, Jimmy 370417b37d Switch to cross-build from M1 via Gitea container registry 2026-02-21 00:40:46 +08:00
Gan, Jimmy 7225615e2f Enable Docker BuildKit for faster builds 2026-02-20 23:57:16 +08:00
Gan, Jimmy 5a94df7973 Revert to Github action checkout & add proxy variables 2026-02-20 23:52:34 +08:00
Gan, Jimmy 3fec3c4e4f Fix checkout action mirror absolute url 2026-02-20 23:28:01 +08:00
Gan, Jimmy 162c5d486d Add workflow path to trigger 2026-02-20 23:24:04 +08:00
Gan, Jimmy fc13510fec Fix action clone timeout by using gitea mirror 2026-02-20 22:29:32 +08:00
Gan, Jimmy 17e7073fab Fix proxy env bug in Telegram alert 2026-02-20 22:21:16 +08:00
Gan, Jimmy dd3e8e0d2c security: remove hardcoded secrets, add health endpoint, add security headers 2026-02-20 22:04:01 +08:00
Gan, Jimmy 7aec5976df fix: resolve OpenClaw iframe connection refused and Docker HTTP proxy conflict 2026-02-20 17:25:16 +08:00
Gan, Jimmy ec2f60fb2f fix: add proxy support to httpx to allow Telegram API requests 2026-02-20 10:36:59 +08:00
Gan, Jimmy b063382085 feat: add container monitor & telegram alerts
Added asyncio monitoring task to main.py to watch Docker container state transitions and send Telegram notifications on failures.
2026-02-20 10:31:18 +08:00
Gan, Jimmy 47a97a09fe feat: add claude-dev docker setup & update openclaw config
Added Dockerfile and docker-compose.yml for claude-dev on NAS. Updated openclaw docker-compose.yml to include --allow-unconfigured argument.
2026-02-20 09:19:36 +08:00
Gan, Jimmy a882f45f2e Add multi-host terminal: NAS + VPS side-by-side 2026-02-20 00:53:29 +08:00
Gan, Jimmy c345f647c7 Fix deploy: use absolute path for SSH key bind mount 2026-02-20 00:25:17 +08:00
Gan, Jimmy a345ba1466 Add mobile responsive sidebar, OpenClaw route 2026-02-20 00:15:36 +08:00
Gan, Jimmy 64ecd99dc7 Add OpenClaw, backup automation, health checks, Telegram notifications
Phase 6: OpenClaw docker-compose (port 3100) with health check
Phase 9: Enhanced backup.sh with full DB/config coverage + Telegram alerts
Phase 10: Health checks on all compose files, /api/system/notify endpoint
2026-02-19 21:40:34 +08:00
Gan, Jimmy 6f540ccdce Fix terminal: use create_process with binary encoding for PTY I/O 2026-02-19 20:32:36 +08:00
Gan, Jimmy 197b7c1cbb Fix session expiry: use config value, increase to 7 days
- LOGIN was ignoring ACCESS_TOKEN_EXPIRE_MINUTES (hardcoded 15min default)
- Pass expires_delta from config in login route
- Increase token lifetime from 30min to 7 days
2026-02-19 19:44:30 +08:00
Gan, Jimmy ee2e5dcb3c Terminal: SSH to NAS host instead of container shell
- Rewrite terminal.py to use asyncssh instead of pty/fork
- Add SSH key pair for dashboard container auth
- Mount SSH key and add SSH config vars in docker-compose
- Install openssh-client in Dockerfile
- Add asyncssh to requirements.txt
2026-02-19 19:24:38 +08:00
Gan, Jimmy 69bd41b5a1 Fix terminal: pass JWT via query param, remove Docker-incompatible IP check
Deploy Dashboard / deploy (push) Failing after 2m11s
2026-02-19 17:44:55 +08:00
Gan, Jimmy bf49e13e56 Add settings page with change password, fix terminal ws bug
Deploy Dashboard / deploy (push) Failing after 2m5s
2026-02-19 17:29:03 +08:00
Gan, Jimmy 4036292273 Bump version to v1.3 — runner DNS fixed
Deploy Dashboard / deploy (push) Successful in 3m39s
2026-02-19 10:26:40 +08:00
Gan, Jimmy 91c8d1b775 Bump version to v1.2 — CI/CD pipeline test
Deploy Dashboard / deploy (push) Failing after 2m6s
2026-02-19 10:18:32 +08:00
Gan, Jimmy b2064726fd Fix CI/CD: remove duplicate docker.sock mount
Runner already passes docker.sock to job containers.
Only mount the dashboard volume for deploy.
2026-02-19 10:18:03 +08:00
Gan, Jimmy 7aeabe1839 Test CI/CD: add version comment
Deploy Dashboard / deploy (push) Failing after 17s
2026-02-19 10:15:14 +08:00
Gan, Jimmy 6c042b5e09 Fix CI/CD workflow: mount Docker socket into job container
- Add container volumes for Docker socket, binary, and dashboard path
- Update runner-config.yaml with valid_volumes whitelist
- Sync source files to NAS volume before rebuilding
- Only trigger on dashboard/** path changes
2026-02-19 10:14:24 +08:00
Gan, Jimmy 75c89b1ef9 Fix auth crashes + add CI/CD workflow
Deploy Dashboard / deploy (push) Failing after 6m59s
- Fix jose->pyjwt import mismatch
- Fix bcrypt->pbkdf2 password hashing
- Fix Sidebar logout prop (ReferenceError)
- Add .gitea/workflows/deploy.yml for automated deployment
2026-02-19 10:04:38 +08:00
Gan, Jimmy 651bc0580e Phase 7: Auth & Security upgrade (JWT, 2FA, Login UI) 2026-02-19 03:47:48 +08:00
Gan, Jimmy f3db7d3654 Dashboard UI overhaul: modern design with system stats, SVG icons, Inter font, theme toggle, loading states, and log modal 2026-02-19 02:29:25 +08:00
Gan, Jimmy ae1b88732d Add Navidrome docker-compose for music streaming 2026-02-19 02:02:54 +08:00
Gan, Jimmy dc605d8e8a Add NAS dashboard: FastAPI + Svelte with Docker mgmt, Gitea, files, terminal 2026-02-19 01:59:50 +08:00
Gan, Jimmy 70aa421d7f Add NAS dashboard MVP: Docker mgmt, Gitea, Files, Terminal 2026-02-19 01:59:50 +08:00
Gan, Jimmy d85b290c33 Add implementation plan for NAS dashboard and services 2026-02-19 01:17:11 +08:00
Gan, Jimmy 526c6a5521 Initial commit: combine nas_tool, nas_webdav, sync-utils 2026-02-18 22:59:43 +08:00