nexxo f0ec2fe03f Keep the SFTP credential on the row it belongs to, encrypted ... The first version put it in the credential vault. The vault refuses it, and correctly: it keeps a registry of fixed, documented credentials so the Secrets page can describe each one, and a per-destination password is not that. Forcing a dynamic key into that registry would have made the registry meaningless. Encrypted onto the row with the same cipher instead — the same key, so it is no more readable in a database dump than anything the vault holds, and it lives with the record it describes. A rotated SECRETS_KEY now says so by name rather than surfacing as an authentication failure against a host that is perfectly fine. Also answers the question that prompted this: the host, port and user fields are there, and appear once SFTP is chosen. A mounted directory has no host on purpose — the mount is made on the server with mount(8), and the application only names the directory it writes into. A test asserts both halves, because "the fields are there, you just cannot see them yet" is not something anybody should have to take on trust. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-07-29 02:46:06 +02:00
..
Admin	Restart the workers automatically after saving .env, instead of handing the operator back to the shell	2026-07-29 02:26:34 +02:00
Auth	Send an already signed-in operator back to the console, not the portal	2026-07-28 15:55:39 +02:00
Billing	Keep the SFTP credential on the row it belongs to, encrypted	2026-07-29 02:46:06 +02:00
Console	Check users directly for the reverse operator-identity collision, not just customers	2026-07-28 15:36:29 +02:00
Mail	Stop mailing the initial admin password, hold it in the panel until noted	2026-07-28 23:19:20 +02:00
Provisioning	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
BillingTest.php	feat(portal): billing page — current plan, upgrades, extra storage, add-ons	2026-07-25 13:36:52 +02:00
CartTest.php	fix(billing): normalise both sides of the VAT comparison; cast the timestamp	2026-07-26 09:36:07 +02:00
ComponentTest.php	feat(portal): Fortify auth + Login/2FA/Dashboard + component kit	2026-07-25 01:20:25 +02:00
ConfirmInModalTest.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
ConnectionStateTest.php	Recover silently from an expired session, and show a connection banner when offline	2026-07-28 21:36:21 +02:00
CustomerTwoFactorTest.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
DashboardTest.php	Stop mailing the initial admin password, hold it in the panel until noted	2026-07-28 23:19:20 +02:00
DeploymentRunsAsTheAppUserTest.php	Repair ownership by looking inside, not at the door	2026-07-28 23:53:25 +02:00
DisplayTimezoneTest.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
DoubleOptInTest.php	Require a confirmed address before an account can use anything	2026-07-28 23:43:20 +02:00
DowngradeTest.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
EditInModalTest.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00
EnsureCustomerActiveTest.php	Satisfy Pint on the two new guard-boundary tests	2026-07-28 15:10:58 +02:00
ErrorPagesTest.php	Ask the tunnel gateway where it actually listens	2026-07-27 14:43:23 +02:00
ExampleTest.php	chore: bootstrap CluPilot control-plane (Laravel 13, Docker stack)	2026-07-25 00:21:30 +02:00
IconLayoutTest.php	Ask the tunnel gateway where it actually listens	2026-07-27 14:43:23 +02:00
IdentitySeparationTest.php	Write down that the console and the portal share no identity	2026-07-28 12:15:13 +02:00
ImpersonationTest.php	Refuse a portal login for an address that already belongs to an operator	2026-07-28 14:42:16 +02:00
InstanceMetricsTest.php	Measure what the template draws	2026-07-27 16:29:28 +02:00
LandingPriceSheetTest.php	Report the estate from the database, and print the traffic that is sold	2026-07-27 04:48:51 +02:00
MailTemplatesTest.php	Put every mail in one design, and confirm an order when the money arrives	2026-07-29 00:14:04 +02:00
MonitoringStatusSyncTest.php	Move the console off /admin, give the status page its own address, and measure monitoring	2026-07-27 06:05:40 +02:00
NewDeviceWarningTest.php	Recognise the devices an account signs in from, and warn about a new one	2026-07-28 23:28:34 +02:00
PortalHostTest.php	Answer on every name for the website, and send them all to one	2026-07-29 01:29:33 +02:00
PortalTabsTest.php	feat(billing): the plan catalogue becomes three tables, and config stops selling	2026-07-26 12:05:56 +02:00
PublicSiteGateTest.php	Stop a disabled operator from bypassing the hidden-site gate	2026-07-28 14:42:29 +02:00
ReleaseComparisonTest.php	Stop the update agent dying on its own tag arithmetic	2026-07-29 00:00:17 +02:00
ReleaseVersionTest.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
SeatsTest.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
SessionListTest.php	Show where an account is signed in, and let it sign the other places out	2026-07-28 23:38:17 +02:00
SettingsTest.php	fix(portal): enforce customer lifecycle per Codex review	2026-07-25 14:45:03 +02:00
SupportRequestTest.php	Editing in modals, an update button that is not gated on a stale reading, and a support page that is real	2026-07-27 17:55:49 +02:00
TrafficTest.php	Measure availability, and let a customer move down again	2026-07-27 16:41:15 +02:00
TranslationParityTest.php	Ask the tunnel gateway where it actually listens	2026-07-27 14:43:23 +02:00
WelcomeTest.php	Give customers two-factor, and stop every button on the settings page reacting at once	2026-07-27 08:48:34 +02:00