CluPilotCloud/docker
nexxo 9352935b88
tests / pest (push) Successful in 6m56s Details
tests / assets (push) Successful in 21s Details
tests / release (push) Successful in 6s Details
fix(nginx): the live hostnames were missing from the admin denylist
The map listed only *.dev.clupilot.com, with the production names commented out
under "add the real public hostnames here before launch". Launching without
them removes the outer of the two layers that keep /admin off the public
internet — the ADMIN_HOSTS check in the app would still answer 404, but the
whole point of the pair is that neither is relied on alone.

admin.clupilot.com stays out of the list on purpose: the list names the hosts
that are PUBLIC, and the console is not one of them.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-07-26 18:43:44 +02:00
..
kuma-bridge fix(monitoring): cap monitoring retries at the run budget; dependency-free liveness probe 2026-07-25 20:19:32 +02:00
nginx fix(nginx): the live hostnames were missing from the admin denylist 2026-07-26 18:43:44 +02:00
php fix(engine): install wireguard-tools + bring up wg0; lock-coordinate host removal 2026-07-25 10:57:51 +02:00
supervisor fix(ui): make modal cancel buttons work; serve the app over the HTTPS domains 2026-07-25 21:24:03 +02:00
entrypoint.sh fix(docker): build assets on start when the manifest is missing 2026-07-25 21:45:27 +02:00