nexxo f0ec2fe03f Keep the SFTP credential on the row it belongs to, encrypted ... The first version put it in the credential vault. The vault refuses it, and correctly: it keeps a registry of fixed, documented credentials so the Secrets page can describe each one, and a per-destination password is not that. Forcing a dynamic key into that registry would have made the registry meaningless. Encrypted onto the row with the same cipher instead — the same key, so it is no more readable in a database dump than anything the vault holds, and it lives with the record it describes. A rotated SECRETS_KEY now says so by name rather than surfacing as an authentication failure against a host that is perfectly fine. Also answers the question that prompted this: the host, port and user fields are there, and appear once SFTP is chosen. A mounted directory has no host on purpose — the mount is made on the server with mount(8), and the application only names the directory it writes into. A test asserts both halves, because "the fields are there, you just cannot see them yet" is not something anybody should have to take on trust. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-07-29 02:46:06 +02:00
..
ConfirmDeleteDatacenter.php	fix(admin): authorize datacenter modal mounts; stale threshold uses step maxDuration	2026-07-25 18:23:44 +02:00
ConfirmDeletePlanDraft.php	feat(admin): a console for creating, pricing and scheduling plans	2026-07-26 12:41:51 +02:00
ConfirmDeleteVpnPeer.php	feat(vpn): ownership, a Developer role, and password-gated config retrieval	2026-07-25 22:31:54 +02:00
ConfirmDisableTwoFactor.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
ConfirmEndOtherSessions.php	Show where an account is signed in, and let it sign the other places out	2026-07-28 23:38:17 +02:00
ConfirmForgetSecret.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
ConfirmReissueVpnPeer.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
ConfirmRemoveHost.php	feat(admin): staff RBAC (spatie) + admin settings page	2026-07-25 15:47:42 +02:00
ConfirmSaveEnv.php	Add a raw .env editor to the Integrations page, with a net under it	2026-07-29 01:51:27 +02:00
ConfirmSaveSecret.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
Customers.php	feat(billing): the plan catalogue becomes three tables, and config stops selling	2026-07-26 12:05:56 +02:00
Datacenters.php	Let a datacenter code be corrected while nothing depends on it, and say which building	2026-07-28 22:25:21 +02:00
EditDatacenter.php	Let a datacenter code be corrected while nothing depends on it, and say which building	2026-07-28 22:25:21 +02:00
EditExportTarget.php	Keep the SFTP credential on the row it belongs to, encrypted	2026-07-29 02:46:06 +02:00
EditInvoiceSeries.php	Give the console a Finance tab: company details, VAT rate, invoice series	2026-07-29 01:18:43 +02:00
Finance.php	Let the export have as many destinations as somebody wants	2026-07-29 02:43:15 +02:00
HostCreate.php	feat(admin): staff RBAC (spatie) + admin settings page	2026-07-25 15:47:42 +02:00
HostDetail.php	feat(admin): staff RBAC (spatie) + admin settings page	2026-07-25 15:47:42 +02:00
Hosts.php	Read VPN host state from the synced peer table, not a live hub call	2026-07-29 00:18:21 +02:00
InstanceAdminAccess.php	Send an operator with an expired session to sign in, not a 500	2026-07-28 18:09:22 +02:00
Instances.php	Report the estate from the database, and print the traffic that is sold	2026-07-27 04:48:51 +02:00
Integrations.php	Restart the workers automatically after saving .env, instead of handing the operator back to the shell	2026-07-29 02:26:34 +02:00
Invoices.php	Take the invoice year off the storage clock too	2026-07-29 02:28:34 +02:00
Mail.php	Merge credentials and infrastructure into one Integrations page	2026-07-29 01:49:39 +02:00
Maintenance.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
Overview.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
PlanVersions.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
Plans.php	feat(admin): a console for creating, pricing and scheduling plans	2026-07-26 12:41:51 +02:00
Provisioning.php	fix(admin): authorize datacenter modal mounts; stale threshold uses step maxDuration	2026-07-25 18:23:44 +02:00
Revenue.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
Sessions.php	Show where an account is signed in, and let it sign the other places out	2026-07-28 23:38:17 +02:00
Settings.php	Update only to a released version, never to whatever landed on main	2026-07-28 22:32:44 +02:00
TwoFactorSetup.php	Let a half-finished two-factor enrolment be cancelled, and rework the setup page	2026-07-28 22:25:27 +02:00
Vpn.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
VpnConfigAccess.php	Send an operator with an expired session to sign in, not a 500	2026-07-28 18:09:22 +02:00