Gan, Jimmy 3fd045aacb feat: security hardening and HTTPS/SSO infrastructure configs ...

- Narrow trusted proxies, remove overly broad 10.0.0.0/8
- Fail closed on missing SSH known_hosts in terminal proxy
- Add Navidrome reverse proxy headers for Authelia SSO
- Add Gitea docker-compose definition
- Add Caddy configs for NAS and VPS edge proxies
- Add dnsmasq split-horizon DNS config
- Add security execution plan document

2026-02-28 22:25:39 +08:00

..

routers

feat: security hardening and HTTPS/SSO infrastructure configs

2026-02-28 22:25:39 +08:00

auth.py

security: harden dashboard (SSH keys, auth, uploads, CORS, non-root)

2026-02-26 17:22:25 +08:00

config.py

feat: security hardening and HTTPS/SSO infrastructure configs

2026-02-28 22:25:39 +08:00

main.py

fix: trust docker gateway IP for reverse proxy auth

2026-02-27 23:48:34 +08:00

requirements.txt

feat: integrate Authelia SSO and update LLDAP routing

2026-02-27 23:04:57 +08:00