Commit Graph
12 Commits
Author SHA1 Message Date
tbenandClaude Opus 5.5 cd707465f4 Harden admin API routes and shell usage
- Require admin auth on interface-local-ip, network-interfaces,
  next-listen-port and public-ip (interface-local-ip and public-ip
  allowed unauthenticated command injection as root)
- Validate interface names and call ip/curl via execFileSync
- Write host/client WireGuard configs with fs instead of shell
  heredocs, validating IPs, AllowedIPs, endpoint and listen port
- Replace rm -rf/cat/mkdir/chmod/test shell calls with fs APIs
- Refuse private media requested through the public media route

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-15 21:09:27 +01:00
tben b2706ce878 Add client DNS config when client allows all IPs 2026-09-20 20:24:01 +01:00
tben 69111e461e Refactor main host setup 2026-09-20 15:37:57 +01:00
tben 3c1d2b61f6 Update hosts form 2026-09-20 13:48:35 +01:00
tben 8ec44ee0a7 Updates 2026-09-20 07:27:29 +01:00
tben d5536b49d9 Updates 2026-09-20 04:14:32 +01:00
tben cda6cff34f Complete client form 2026-09-17 08:43:00 +01:00
tben e0d105beb9 Major updates 2026-09-14 07:56:13 +01:00
tben 42224c94d3 Refactor wireguard to use a different config dir instead of /etc/wireguard 2026-09-13 13:37:48 +01:00
tben 86eb3a0b05 Add host setup functions and client components 2026-09-13 10:52:30 +01:00
tben 76679aabe7 Implement wireguard client setup with auto key generation and host discovery 2026-09-13 08:31:10 +01:00
tben e057d21e75 Update setupWireguardHost function to grab clients from database 2026-09-13 07:55:28 +01:00