nexxo d1302e17bc fix(vpn): purging a host no longer leaves a phantom access behind ... The FK only nulled host_id, so the adopted peer stayed enabled-but-absent: shown as "wird angewendet" forever, and re-enabling it would have put the deleted host's key and address back on the hub. PurgeHost now tombstones that row, which hands it to the same revocation machinery as everything else. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 22:00:13 +02:00
..
Actions	fix(auth/admin): atomic user+customer signup; Rule::in for country validation (comma-safe)	2026-07-25 18:33:09 +02:00
Console	feat(engine): orchestrator core (state machine + tick + lock)	2026-07-25 09:54:52 +02:00
Http	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
Livewire	fix(vpn): never let an access hijack a host key; name adopted peers correctly	2026-07-25 21:58:03 +02:00
Mail	fix(admin): confirm maintenance delivery via MessageSent (retryable until sent); guard resend/cancel on derived state; fix flaky non-unique host wg_ip	2026-07-25 16:14:01 +02:00
Models	fix(vpn): stop revoked accesses coming back and stale jobs undoing intent	2026-07-25 21:41:03 +02:00
Notifications	fix(engine-b): default-deny firewall, disk-based capacity, synchronous credential mail	2026-07-25 12:39:15 +02:00
Providers	fix(security): close the Livewire bypass of the admin host restriction	2026-07-25 20:50:22 +02:00
Provisioning	fix(vpn): purging a host no longer leaves a phantom access behind	2026-07-25 22:00:13 +02:00
Services	fix(vpn): stop revoked accesses coming back and stale jobs undoing intent	2026-07-25 21:41:03 +02:00
Support	feat(admin): VPN access management with live peer state	2026-07-25 21:38:12 +02:00