nexxo 0066b1c6a0 feat(security): a way back into the console that does not need the console ... The allowlist is managed in the console, which is fine until the address you manage it from changes — and then the page that would fix the problem is the page the problem blocks. Every gate needs a door that does not depend on itself, and on a server that door is a shell: php artisan clupilot:console-access show php artisan clupilot:console-access allow 203.0.113.7 php artisan clupilot:console-access open The address check moved to RestrictConsoleNetwork::isNetwork() so the command and the console apply the same rule. Codex caught the version that did not: a typo like 203.0.113.9/99 was stored, reported as success, and matched nothing — leaving whoever was recovering still locked out, now believing they were not. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-07-27 03:09:13 +02:00
..
ConfirmDeleteDatacenter.php	fix(admin): authorize datacenter modal mounts; stale threshold uses step maxDuration	2026-07-25 18:23:44 +02:00
ConfirmDeletePlanDraft.php	feat(admin): a console for creating, pricing and scheduling plans	2026-07-26 12:41:51 +02:00
ConfirmDeleteVpnPeer.php	feat(vpn): ownership, a Developer role, and password-gated config retrieval	2026-07-25 22:31:54 +02:00
ConfirmRemoveHost.php	feat(admin): staff RBAC (spatie) + admin settings page	2026-07-25 15:47:42 +02:00
Customers.php	feat(billing): the plan catalogue becomes three tables, and config stops selling	2026-07-26 12:05:56 +02:00
Datacenters.php	fix(datacenters): a code becomes a DNS label, so validate it as one	2026-07-25 23:56:50 +02:00
EditDatacenter.php	fix(auth/admin): atomic user+customer signup; Rule::in for country validation (comma-safe)	2026-07-25 18:33:09 +02:00
HostCreate.php	feat(admin): staff RBAC (spatie) + admin settings page	2026-07-25 15:47:42 +02:00
HostDetail.php	feat(admin): staff RBAC (spatie) + admin settings page	2026-07-25 15:47:42 +02:00
Hosts.php	feat(admin): scalable host list (search/filter/health) + host detail redesign	2026-07-25 14:27:53 +02:00
InstanceAdminAccess.php	fix(admin): the admin password is shown once, and means it	2026-07-26 05:34:57 +02:00
Instances.php	feat(admin): dark Tactical-Terminal operator console	2026-07-25 08:35:03 +02:00
Maintenance.php	fix(maintenance): make the window form usable	2026-07-25 23:05:33 +02:00
Overview.php	feat(admin): datacenter edit+delete (guarded); MRR chart fills card; host-load as meters	2026-07-25 14:22:15 +02:00
PlanVersions.php	feat(admin): a console for creating, pricing and scheduling plans	2026-07-26 12:41:51 +02:00
Plans.php	feat(admin): a console for creating, pricing and scheduling plans	2026-07-26 12:41:51 +02:00
Provisioning.php	fix(admin): authorize datacenter modal mounts; stale threshold uses step maxDuration	2026-07-25 18:23:44 +02:00
Revenue.php	feat(admin): dark Tactical-Terminal operator console	2026-07-25 08:35:03 +02:00
Settings.php	feat(security): a way back into the console that does not need the console	2026-07-27 03:09:13 +02:00
Vpn.php	fix(vpn): a late revocation must not disconnect whoever holds the key now	2026-07-26 01:24:55 +02:00
VpnConfigAccess.php	fix(vpn): count downloads in the database; repair the race test	2026-07-25 22:48:38 +02:00