75 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Gan, Jimmy	a4018ed3ca	fix: read real client IP from X-Forwarded-For behind Caddy/Docker	2026-02-26 03:29:28 +08:00
Gan, Jimmy	6ed57f56f5	fix: use TCP socket probe instead of ping for LAN detection	2026-02-26 03:27:04 +08:00
Gan, Jimmy	1b55675201	fix: ping router instead of Mac for LAN detection	2026-02-26 03:24:02 +08:00
Gan, Jimmy	da1f709f01	feat: LAN detection via ping probe for Tailscale clients at home	2026-02-26 03:19:14 +08:00
Gan, Jimmy	2835e6b021	feat: detect LAN client via /api/client-ip for smart sidebar links	2026-02-26 03:11:13 +08:00
Gan, Jimmy	22e9066ffe	feat: terminal tabs with on-demand connections and Claude Dev host	2026-02-26 02:59:25 +08:00
Gan, Jimmy	69ed0f981c	fix: support port 8443 origin for WebAuthn passkeys and CORS	2026-02-26 02:00:29 +08:00
Gan, Jimmy	a95bac7f7c	feat: update Navidrome remoteHref to use NAS Caddy port 8443	2026-02-26 01:56:38 +08:00
jimmy	c91954e33f	revert test commit	2026-02-25 13:46:29 +00:00
jimmy	9fb78c2b71	test: verify Claude Code on NAS can build+deploy	2026-02-25 13:40:11 +00:00
Gan, Jimmy	a968364f18	CI: add build step to deploy workflow ... - Clone from local Gitea instead of actions/checkout - Build with legacy builder (DOCKER_BUILDKIT=0) for Docker mirror support - Use npm China mirror (registry.npmmirror.com) in Dockerfile - Combined npm install+build in single RUN step - Removed stale proxy env vars	2026-02-25 21:14:00 +08:00
Gan, Jimmy	dcc078addd	Add CLAUDE.md for shared project context	2026-02-25 02:09:04 +08:00
Gan, Jimmy	adaaee1350	Fix sidebar links: use Tailscale IP when accessed via public domain	2026-02-25 00:22:54 +08:00
Gan, Jimmy	6ae0cab143	Reorganize sidebar: Main/Media/Tools categories, Settings to bottom	2026-02-25 00:16:49 +08:00
Gan, Jimmy	4289e98b7a	Fix sidebar: add overflow scroll for small screens	2026-02-25 00:09:49 +08:00
Gan, Jimmy	facda4eadd	Clean up: remove stale scripts/docs, fix debug prints, update PLAN.md	2026-02-24 10:14:48 +08:00
Gan, Jimmy	bbf187fd27	Update LAN IP to 192.168.31.221 for Sidebar links	2026-02-24 01:46:07 +08:00
Gan, Jimmy	53cf101307	Phase 9: backup script + Telegram alerts; add Phase 13 placeholder; fix OpenClaw ANTHROPIC_BASE_URL	2026-02-22 20:36:12 +08:00
Gan, Jimmy	4310ae5fee	Add Audiobookshelf, Stirling PDF, Vaultwarden to sidebar; update PLAN.md	2026-02-22 20:13:39 +08:00
Gan, Jimmy	dd54c41646	Fix storage display: deduplicate volumes by device	2026-02-22 18:37:49 +08:00
Gan, Jimmy	c081e87a5e	Fix OpenClaw: auto-include gateway token in dashboard link	2026-02-22 18:30:34 +08:00
Gan, Jimmy	edcaea61f0	Add container health status, multi-volume storage, auto-refresh Overview	2026-02-22 17:11:17 +08:00
Gan, Jimmy	5023137d21	Smart LAN routing for Navidrome sidebar link	2026-02-22 16:59:33 +08:00
Gan, Jimmy	b8733f31f9	Fix passkey login on non-HTTPS connections	2026-02-22 16:52:27 +08:00
Gan, Jimmy	bf15dad061	Smart LAN detection for sidebar service links	2026-02-22 16:45:31 +08:00
Gan, Jimmy	c280a64d07	Replace Emby with Jellyfin in sidebar	2026-02-22 16:28:00 +08:00
Gan, Jimmy	df01b3a452	Fix Settings page dark mode styling	2026-02-22 15:03:36 +08:00
Gan, Jimmy	db50b18607	Add Speedtest to sidebar, set up on port 8080	2026-02-22 14:57:47 +08:00
Gan, Jimmy	13eec52cc4	Fix audit log timezone to UTC+8	2026-02-22 12:42:21 +08:00
Gan, Jimmy	eb3391cec4	Categorize audit log by threat level with filtering UI	2026-02-22 12:38:59 +08:00
Gan, Jimmy	8e8f465b40	Add audit log viewer to Settings page	2026-02-22 12:34:21 +08:00
Gan, Jimmy	ffac6f47bf	Show passkey names and dates, add individual delete	2026-02-22 12:20:05 +08:00
Gan, Jimmy	888d3e5c49	Add PublicKeyCredential guard for passkey registration	2026-02-22 11:44:02 +08:00
Gan, Jimmy	9683cd3165	Add security improvements: refresh tokens, passkeys, CSP, audit logging, TOTP encryption ... - Shorten access token to 30min with 7-day refresh token flow - Add WebAuthn passkey registration and login with TOTP fallback - Add Content-Security-Policy header - Add audit logging middleware to /volume1/docker/nas-dashboard/audit.log - Block /volume1/docker/ in files endpoint - Encrypt TOTP secret at rest with Fernet (derived from SECRET_KEY) - New deps: py_webauthn, cryptography	2026-02-22 11:04:40 +08:00
Gan, Jimmy	8392b49bb7	Add __pycache__ to gitignore and remove duplicates	2026-02-22 10:05:37 +08:00
Gan, Jimmy	bcf994e6e3	Fix Navidrome sidebar link to use music.jimmygan.com	2026-02-21 11:20:56 +08:00
Gan, Jimmy	c5fcb9bc64	Add CORS, rate limiting, security headers, and files endpoint protection	2026-02-21 11:18:29 +08:00
Gan, Jimmy	52ca6eb5d4	Fix CI: use --pull never instead of --no-pull	2026-02-21 11:16:07 +08:00
Gan, Jimmy	538d306902	Fix CI: remove checkout step that requires GitHub access	2026-02-21 11:14:04 +08:00
Gan, Jimmy	08f7ba5c3c	Fix CI: add --no-pull to avoid Docker Hub pull failure	2026-02-21 11:09:52 +08:00
Gan, Jimmy	d3ccca52f0	Use docker save/load for cross-build deploy from M1 to NAS	2026-02-21 11:05:00 +08:00
Gan, Jimmy	1e3bd71bfb	Switch to cross-build from M1 via Gitea container registry	2026-02-21 00:40:46 +08:00
Gan, Jimmy	fa63214e0c	Enable Docker BuildKit for faster builds	2026-02-20 23:57:16 +08:00
Gan, Jimmy	eeac606b03	Revert to Github action checkout & add proxy variables	2026-02-20 23:52:34 +08:00
Gan, Jimmy	e0574bb1b0	Fix checkout action mirror absolute url	2026-02-20 23:28:01 +08:00
Gan, Jimmy	a9059759ff	Add workflow path to trigger	2026-02-20 23:24:04 +08:00
Gan, Jimmy	32ccee93ad	Fix action clone timeout by using gitea mirror	2026-02-20 22:29:32 +08:00
Gan, Jimmy	9fcce3a0a8	Fix proxy env bug in Telegram alert	2026-02-20 22:21:16 +08:00
Gan, Jimmy	18605926ca	security: remove hardcoded secrets, add health endpoint, add security headers	2026-02-20 22:04:01 +08:00
Gan, Jimmy	c6392556d5	fix: resolve OpenClaw iframe connection refused and Docker HTTP proxy conflict	2026-02-20 17:25:16 +08:00