nexxo 49a3ca2e33 Keep the shop window off the portal's front door ... The landing page was registered host-agnostically, so app.clupilot.com served it: marketing copy, a pricing table and a "sign up" call to action, at the address where a customer's servers live. Reported exactly that way. SITE_HOST binds the website to its own hostname. Every other host — the portal, a bare IP — answers "/" with the product: the dashboard for somebody signed in, the sign-in page for everybody else. Never a 404 there: "/" is what people type from memory, and turning that into an error page to make a point about hostnames helps nobody. Empty keeps today's behaviour, which every development machine reached by IP depends on. The console is unaffected — its routes are registered first and win on their own host, the ordering the status page above already documents. The legal pages are deliberately not bound. An imprint has to be reachable from wherever the reader is standing, and a mail footer links to it from whichever host sent the mail. Also drops "just reply to this message" from two mails. A reply lands in the billing or provisioning mailbox rather than in the support queue somebody actually works through — so it now says to raise it in the portal, where it gets a place in that queue instead of getting lost. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-07-29 00:26:22 +02:00
..
Admin	Read VPN host state from the synced peer table, not a live hub call	2026-07-29 00:18:21 +02:00
Auth	Send an already signed-in operator back to the console, not the portal	2026-07-28 15:55:39 +02:00
Billing	fix(billing): hold only what cannot be matched, and let migrations roll back	2026-07-26 13:57:11 +02:00
Console	Check users directly for the reverse operator-identity collision, not just customers	2026-07-28 15:36:29 +02:00
Mail	Stop mailing the initial admin password, hold it in the panel until noted	2026-07-28 23:19:20 +02:00
Provisioning	Close SSH and the Proxmox UI to the world once the tunnel is proven up	2026-07-28 23:57:07 +02:00
BillingTest.php	feat(portal): billing page — current plan, upgrades, extra storage, add-ons	2026-07-25 13:36:52 +02:00
CartTest.php	fix(billing): normalise both sides of the VAT comparison; cast the timestamp	2026-07-26 09:36:07 +02:00
ComponentTest.php	feat(portal): Fortify auth + Login/2FA/Dashboard + component kit	2026-07-25 01:20:25 +02:00
ConfirmInModalTest.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
ConnectionStateTest.php	Recover silently from an expired session, and show a connection banner when offline	2026-07-28 21:36:21 +02:00
CustomerTwoFactorTest.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
DashboardTest.php	Stop mailing the initial admin password, hold it in the panel until noted	2026-07-28 23:19:20 +02:00
DeploymentRunsAsTheAppUserTest.php	Repair ownership by looking inside, not at the door	2026-07-28 23:53:25 +02:00
DisplayTimezoneTest.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
DoubleOptInTest.php	Require a confirmed address before an account can use anything	2026-07-28 23:43:20 +02:00
DowngradeTest.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
EditInModalTest.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00
EnsureCustomerActiveTest.php	Satisfy Pint on the two new guard-boundary tests	2026-07-28 15:10:58 +02:00
ErrorPagesTest.php	Ask the tunnel gateway where it actually listens	2026-07-27 14:43:23 +02:00
ExampleTest.php	chore: bootstrap CluPilot control-plane (Laravel 13, Docker stack)	2026-07-25 00:21:30 +02:00
IconLayoutTest.php	Ask the tunnel gateway where it actually listens	2026-07-27 14:43:23 +02:00
IdentitySeparationTest.php	Write down that the console and the portal share no identity	2026-07-28 12:15:13 +02:00
ImpersonationTest.php	Refuse a portal login for an address that already belongs to an operator	2026-07-28 14:42:16 +02:00
InstanceMetricsTest.php	Measure what the template draws	2026-07-27 16:29:28 +02:00
LandingPriceSheetTest.php	Report the estate from the database, and print the traffic that is sold	2026-07-27 04:48:51 +02:00
MailTemplatesTest.php	Put every mail in one design, and confirm an order when the money arrives	2026-07-29 00:14:04 +02:00
MonitoringStatusSyncTest.php	Move the console off /admin, give the status page its own address, and measure monitoring	2026-07-27 06:05:40 +02:00
NewDeviceWarningTest.php	Recognise the devices an account signs in from, and warn about a new one	2026-07-28 23:28:34 +02:00
PortalHostTest.php	Keep the shop window off the portal's front door	2026-07-29 00:26:22 +02:00
PortalTabsTest.php	feat(billing): the plan catalogue becomes three tables, and config stops selling	2026-07-26 12:05:56 +02:00
PublicSiteGateTest.php	Stop a disabled operator from bypassing the hidden-site gate	2026-07-28 14:42:29 +02:00
ReleaseComparisonTest.php	Stop the update agent dying on its own tag arithmetic	2026-07-29 00:00:17 +02:00
ReleaseVersionTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
SeatsTest.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
SessionListTest.php	Show where an account is signed in, and let it sign the other places out	2026-07-28 23:38:17 +02:00
SettingsTest.php	fix(portal): enforce customer lifecycle per Codex review	2026-07-25 14:45:03 +02:00
SupportRequestTest.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00
TrafficTest.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
TranslationParityTest.php	Ask the tunnel gateway where it actually listens	2026-07-27 14:43:23 +02:00
WelcomeTest.php	Give customers two-factor, and stop every button on the settings page reacting at once	2026-07-27 08:48:34 +02:00