Moduletrace/wireguard-ui
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
81 Commits 2 Branches 0 Tags
e50b0405b047d79c9b7c42a3e80ec36e64c2dcc5
Commit Graph
81 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
tben e50b0405b0 Fix security issues 2026-10-15 21:10:36 +01:00
tbenandClaude Opus 5.5 fe4b1b02d1 Remove unused dependencies and dead code, refresh AGENTS.md 
- Drop unused email module and media text extraction path
- Remove 12 unused dependencies
- Remove unused imports in server.ts
- Add typecheck and test scripts
- Rewrite AGENTS.md to describe this project

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-15 21:09:27 +01:00
tbenandClaude Opus 5.5 617400c19f Enforce client ownership in clients CRUD put/post 
Non-super-admin PUT updated the client whose id equalled the user's id;
it now updates the requested client only if the user owns it. POST no
longer lets non-super-admins overwrite existing clients by id.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-15 21:09:27 +01:00
tbenandClaude Opus 5.5 cd707465f4 Harden admin API routes and shell usage 
- Require admin auth on interface-local-ip, network-interfaces,
  next-listen-port and public-ip (interface-local-ip and public-ip
  allowed unauthenticated command injection as root)
- Validate interface names and call ip/curl via execFileSync
- Write host/client WireGuard configs with fs instead of shell
  heredocs, validating IPs, AllowedIPs, endpoint and listen port
- Replace rm -rf/cat/mkdir/chmod/test shell calls with fs APIs
- Refuse private media requested through the public media route

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-15 21:09:27 +01:00
tbenandClaude Opus 5.5 178f98104c Fix type-check after bun-sqlite 1.2.0 upgrade 
Import types from @moduletrace/bun-sqlite/types now that the package
has an exports map, and guard optional ctx.props in signup server fn.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-15 21:09:27 +01:00
tben 0f940048d4 Update bunext and bun-sqlite versions 2026-10-15 20:44:16 +01:00
tben b6f7eb0c75 Allow wildcard rule access host public IP ports 2026-10-07 11:28:41 +01:00
tben c42f0440ac Iptables generator funciton bugfix followup: allow host network ports 2026-09-28 21:24:44 +01:00
tben 19486bbfa0 Iptables generator funciton bugfix 2026-09-28 20:31:17 +01:00
tben 8492ae1a2a Revert to previous version 2026-09-28 18:54:01 +01:00
tben 73a3384d98 Fix DNS resolution issues 2026-09-28 18:34:09 +01:00
tben 9b6136c648 Remove comments 2026-09-28 12:37:24 +01:00
tben 464b814dd1 Bugfix: host form public ip interface param 2026-09-27 16:19:40 +01:00
tben 3d0ef98385 Iptables restrictions bugfix: #3: Restrict inter-host access 2026-09-27 16:07:55 +01:00
tben 5560567143 Iptables restrictions bugfix: #2: Restrict inter-host access 2026-09-27 15:57:36 +01:00
tben 65b321f73b Iptables restrictions bugfix: #1 2026-09-27 15:40:05 +01:00
tben dbae73a746 Add firewall rules logic for all hosts 2026-09-27 14:25:27 +01:00
tben bbf29a5c1a Update README.md. Add link to site URL 2026-09-27 07:10:28 +01:00
tben 8ed5fd1845 Update clients fetch function 2026-09-27 06:59:16 +01:00
tben c23c8f73cd Update AGENTS.md file 2026-09-27 06:09:11 +01:00
tben 400831246f Fix iptables internet forwarding bug. Update UI errors. 2026-09-27 06:08:07 +01:00
tben dc8700feaa Iptables hardening and dev server bind fix 2026-09-22 13:59:56 +01:00
tben 782727bc44 Iptables bugfix: add space between -i flag and interface name 2026-09-22 13:35:53 +01:00
tben 4adec1700e Extract shared ClientsTable component and useClientRulesMap hook 2026-09-22 13:35:02 +01:00
tben c4b057ba7a Add input title and label to setup repo input 2026-09-21 15:13:31 +01:00
tben 803ba0adef Iptables bugfix: allow dns queries over wireguard tunnel 2026-09-21 15:08:54 +01:00
tben b0536765ce Update database schema. Client rules are randomly deleted because of the foreign key. Remove all foreign keys from db schema 2026-09-21 14:14:54 +01:00
tben d52c584c8f Update README.md. Update curl installation URL 2026-09-21 07:13:31 +01:00
tben 501b99cbc8 Update README.md. Remove deploy and docker. Add zip and unzip to dependencies 2026-09-21 04:30:51 +01:00
tben a681354eab Update host update form for main host (host 0) 2026-09-20 20:48:47 +01:00
tben b2706ce878 Add client DNS config when client allows all IPs 2026-09-20 20:24:01 +01:00
tben db9b66b984 Bugfix. Remove main duplicate 2026-09-20 20:04:18 +01:00
tben 4f49d3f3f5 Remove crypto and replace with npm uuid package 2026-09-20 19:52:39 +01:00
tben 6f09d0a2f3 Update installation script. Setup BunSQLite, configure firewall 2026-09-20 19:41:55 +01:00
tben 8535a52830 Add server request debug logs 2026-09-20 19:23:27 +01:00
tben 79433168df Update server start log 2026-09-20 19:19:15 +01:00
tben a4c7130c0e Remove install script from server.ts 2026-09-20 19:18:15 +01:00
tben 11fd924c50 Add observability log to server.ts 2026-09-20 19:15:56 +01:00
tben 09ec6a28e2 Update server listen hostname 2026-09-20 19:12:16 +01:00
tben b3a4719f83 Update installation script: fix systemd infinite loop pass #2 2026-09-20 19:03:23 +01:00
tben b00e45f0e2 Update installation script: fix systemd infinite loop pass #2 2026-09-20 18:58:23 +01:00
tben 8fa6decb89 Update installation script: fix systemd infinite loop 2026-09-20 18:52:59 +01:00
tben 368434129a Update installation script to support Oracle Linux 2026-09-20 18:45:42 +01:00
tben 7f7f295546 Update README.md 2026-09-20 18:43:41 +01:00
tben bd1aa199d3 Update README.md 2026-09-20 18:38:34 +01:00
tben acbde93494 Remove bun-mariadb artifacts 2026-09-20 18:34:34 +01:00
tben 86a58c6869 Update README.md 2026-09-20 18:32:54 +01:00
tben f05384d8fe Add admin setup page 2026-09-20 18:15:51 +01:00
tben 27676c5a3f Fix client access scope 2026-09-20 17:26:11 +01:00
tben aa0a292943 Updates 2026-09-20 17:04:17 +01:00