scriptos/keywarden
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 6 Wiki Activity
41 Commits 6 Branches 6 Tags
b665e623f9d6cce80610b5b8a6f2aa8832ddee8b
Commit Graph
14 Commits
Author SHA1 Message Date
scriptos b665e623f9 feat: add login page customization (background image, glass card style, subtitle) 2026-04-08 23:12:30 +02:00
scriptos 34ce8a8fc3 feat: add gzip compression middleware for HTTP responses 2026-04-08 22:32:12 +02:00
scriptos dd4af5b25c feat: allow owner to deploy system master key from deploy page 2026-04-08 21:37:27 +02:00
scriptos 1cf7f50bfb feat: centralize version in internal/version package, fix updater for pre-release tags, show version in footer 2026-04-08 21:10:07 +02:00
scriptos ca402eb88e fix: harden auth timing, cookie attrs, password gen bias, email template escaping; add security tests 2026-04-08 20:45:16 +02:00
scriptos 653592e68f feat: add automatic update checker with version injection
PR Tests / Lint, Build & Test (pull_request) Successful in 5m45s
Details
Security Scan / Go Vulnerability Check (pull_request) Failing after 5m42s
Details 
- Add internal/updater package (queries Gitea releases API every 6h)

- Inject version at build time via -ldflags (-X main.Version)

- Show update badge in header for admin/owner users

- Show version on system info page

- Add VERSION build arg to Dockerfile

- Update docs (deployment, architecture, admin-guide, contributing, README)
 2026-04-07 23:13:26 +02:00
scriptos a63f3fb5ff feat: add 5 theme pairs (ocean, forest, sunset, rose, nord) with light/dark/auto modes\n\n- Override Tabler dark-mode surface/border CSS variables per theme to remove blue tint\n- Add theme accent colors for badges, buttons, links, forms\n- Make Ocean the default theme, auto-migrate legacy values (auto/light/dark)\n- Update settings dropdown with grouped theme options\n- Update user-guide docs with new theme descriptions" 2026-04-07 22:14:56 +02:00
scriptos c4171e5b87 feat: protect initial owner from role change and deletion 2026-04-07 20:47:22 +02:00
scriptos 8b9de9e83d feat: add Bastillion-style SSH key enforcement worker 2026-04-06 00:17:03 +02:00
scriptos 68777a5516 feat: add CLI password reset command (docker exec reset-password) 2026-04-05 22:17:46 +02:00
scriptos bb3bf0330f security: fix data loss on container restart due to relative paths 
Root cause: .env.example used relative paths (./data/...) which resolve
to /app/data/ inside the container instead of the persistent volume at
/data/. This caused the database to be recreated on every container
restart, resetting the admin password to a new initial value.

Fixes:
- .env.example: comment out path settings with clear warning about
  relative paths; Dockerfile already provides correct absolute defaults
- auth: add initial_setup_complete flag in settings table as
  defence-in-depth so EnsureAdmin never re-creates an admin after
  the initial setup, even if the users table is unexpectedly empty
- main: add validateDataPaths() startup check that warns when relative
  container paths are detected (potential data-loss misconfiguration)
- auth_test: extend TestEnsureAdmin to verify the flag prevents
  admin re-creation after user deletion
 2026-04-05 19:21:15 +02:00
scriptos ea3e7e71ca refactor: convert force_password_change to standalone layout (no sidebar) 2026-04-05 19:03:32 +02:00
scriptos 268955732a fix: use net.JoinHostPort for IPv6-compatible address formatting
PR Tests / Lint, Build & Test (pull_request) Successful in 5m19s
Details
Security Scan / Go Vulnerability Check (pull_request) Failing after 17s
Details
2026-04-05 18:18:26 +02:00
scriptos fd13e67aef Release: v0.1.0-alpha
Release Docker Image / Build & Push Docker Image (release) Failing after 1m30s
Details
2026-04-05 16:56:16 +02:00