Commit Graph

11 Commits

Author SHA1 Message Date
Gan, Jimmy c7a0a53fe8 security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)
Deploy Dashboard / deploy (push) Successful in 3m37s
Remove SSH private keys from git, add SECRET_KEY validation, move WS
auth from query string to first message, add session limits/idle timeout,
PBKDF2 Fernet key, refresh token rotation, TOTP replay protection,
file upload size limit + filename sanitization, symlink safety check,
restrict CORS methods, IP-gate OpenClaw token, run container as non-root,
rate-limit refresh/passkey endpoints, sanitize Gitea path params.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-02-26 17:22:25 +08:00
Gan, Jimmy dd54c41646 Fix storage display: deduplicate volumes by device
Deploy Dashboard / deploy (push) Successful in 31s
2026-02-22 18:37:49 +08:00
Gan, Jimmy c081e87a5e Fix OpenClaw: auto-include gateway token in dashboard link
Deploy Dashboard / deploy (push) Successful in 48s
2026-02-22 18:30:34 +08:00
Gan, Jimmy edcaea61f0 Add container health status, multi-volume storage, auto-refresh Overview
Deploy Dashboard / deploy (push) Successful in 35s
2026-02-22 17:11:17 +08:00
Gan, Jimmy eb3391cec4 Categorize audit log by threat level with filtering UI
Deploy Dashboard / deploy (push) Successful in 26s
2026-02-22 12:38:59 +08:00
Gan, Jimmy 8e8f465b40 Add audit log viewer to Settings page
Deploy Dashboard / deploy (push) Successful in 28s
2026-02-22 12:34:21 +08:00
Gan, Jimmy c6392556d5 fix: resolve OpenClaw iframe connection refused and Docker HTTP proxy conflict
Deploy Dashboard / deploy (push) Successful in 8m20s
2026-02-20 17:25:16 +08:00
Gan, Jimmy 0519a4b4c6 fix: add proxy support to httpx to allow Telegram API requests
Deploy Dashboard / deploy (push) Successful in 3m24s
2026-02-20 10:36:59 +08:00
Gan, Jimmy 1a93caf62d feat: add container monitor & telegram alerts
Deploy Dashboard / deploy (push) Has been cancelled
Added asyncio monitoring task to main.py to watch Docker container state transitions and send Telegram notifications on failures.
2026-02-20 10:31:18 +08:00
Gan, Jimmy 28149b991e Add OpenClaw, backup automation, health checks, Telegram notifications
Deploy Dashboard / deploy (push) Failing after 1m52s
Phase 6: OpenClaw docker-compose (port 3100) with health check
Phase 9: Enhanced backup.sh with full DB/config coverage + Telegram alerts
Phase 10: Health checks on all compose files, /api/system/notify endpoint
2026-02-19 21:40:34 +08:00
Gan, Jimmy f3db7d3654 Dashboard UI overhaul: modern design with system stats, SVG icons, Inter font, theme toggle, loading states, and log modal 2026-02-19 02:29:25 +08:00