3 Commits

Author	SHA1	Message	Date
Gan, Jimmy	4b32929dcc	feat: watchtower tracking, dev environment, security logs page ... - watchtower: docker-compose with label filtering, email notifications - watchtower labels on navidrome, openclaw, immich services - dev env: docker-compose.dev.yml (port 4001), deploy-dev.yml CI workflow - dev.nas.jimmygan.com Caddy site block with Authelia forward_auth - security page: backend router parsing Authelia/Caddy container logs - security page: frontend with stats cards, timeline, top IPs, event log - wired security route into App.svelte and Sidebar	2026-03-01 00:40:14 +08:00
Gan, Jimmy	44aafe7ea5	fix: use 127.0.0.1 instead of localhost in NAS Caddyfile ... Prevents Caddy from trying IPv6 [::1] which fails when services are bound to IPv4 127.0.0.1 only.	2026-02-28 23:11:28 +08:00
Gan, Jimmy	3fd045aacb	feat: security hardening and HTTPS/SSO infrastructure configs ... - Narrow trusted proxies, remove overly broad 10.0.0.0/8 - Fail closed on missing SSH known_hosts in terminal proxy - Add Navidrome reverse proxy headers for Authelia SSO - Add Gitea docker-compose definition - Add Caddy configs for NAS and VPS edge proxies - Add dnsmasq split-horizon DNS config - Add security execution plan document	2026-02-28 22:25:39 +08:00