nexxo 17d7dc2ad9 fix(vpn): store the config inside the creation transaction ... Encryption and the write ran after the transaction had committed and the peer had been dispatched to the hub. A failure there left a live access whose config was never stored — unrecoverable, and the operator would create a second one not knowing why. Both now happen in the same insert; nothing is dispatched unless it succeeded. Re-verified in the browser afterwards: create with storage, wrong password refused, right password reveals the config. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 22:53:30 +02:00
..
Actions	fix(auth/admin): atomic user+customer signup; Rule::in for country validation (comma-safe)	2026-07-25 18:33:09 +02:00
Console	feat(engine): orchestrator core (state machine + tick + lock)	2026-07-25 09:54:52 +02:00
Http	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
Livewire	fix(vpn): store the config inside the creation transaction	2026-07-25 22:53:30 +02:00
Mail	fix(admin): confirm maintenance delivery via MessageSent (retryable until sent); guard resend/cancel on derived state; fix flaky non-unique host wg_ip	2026-07-25 16:14:01 +02:00
Models	feat(vpn): ownership, a Developer role, and password-gated config retrieval	2026-07-25 22:31:54 +02:00
Notifications	fix(engine-b): default-deny firewall, disk-based capacity, synchronous credential mail	2026-07-25 12:39:15 +02:00
Policies	fix(vpn): losing the operator roles closes the owner doors by itself	2026-07-25 22:50:13 +02:00
Providers	fix(security): close the Livewire bypass of the admin host restriction	2026-07-25 20:50:22 +02:00
Provisioning	fix(vpn): classify adopted peers as system, not staff; drop duplicate env line	2026-07-25 22:34:18 +02:00
Services	fix(vpn): give the QR code the specified four-module quiet zone	2026-07-25 22:40:54 +02:00
Support	feat(admin): VPN access management with live peer state	2026-07-25 21:38:12 +02:00