clusev

Commit Graph

Author	SHA1	Message	Date
boban	2b245c3d3a	feat(wireguard): SSH lock + peer config download (v0.9.40) Two dashboard additions to the WireGuard page: - Peer config download: the show-once new-client view gets a "Download" button next to the QR code (streams clusev-wireguard.conf) plus an inline hint explaining QR-on-phone vs download-on-PC import. - SSH lock (port 22): an optional toggle in WireGuard settings that walls off host SSH to the tunnel via a dedicated CLUSEV-WG-SSH chain on the host INPUT chain. Fail-open by construction: ESTABLISHED,RELATED + lo + wg0 + WG-subnet RETURN before the DROP (live sessions survive, SSH over the tunnel stays open); _ssh_gate_on refuses while wg0 is down; the boot unit's ConditionPathExists=wg0 and an in-function self-guard keep a broken tunnel from ever applying the DROP; ssh_gate_apply re-validates the subnet shape and fails open on a corrupt wg.env. Strong lock-out warning shown inline AND in the confirm modal (recommend a backup peer). New CLI escapes: clusev wg ssh-lock / ssh-unlock; clusev wg down clears both gates. Panel gate and SSH gate are independent toggles. Write-bridge: new gate-ssh-on/gate-ssh-off actions (no args, host whitelist + ConfirmToken wgSshGate, single-use uid-bound). Status collector now reports gate.ssh. Adversarial lock-out review: all 8 failure modes refuted. 348 tests pass, shellcheck clean, Pint clean, R12 verified. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-21 09:25:19 +02:00
boban	6302ef5e7a	feat: v1 dashboard UI — app shell + component kit + mock fleet - Responsive app shell: sidebar (brand, server switcher, nav, user) as an off-canvas drawer on mobile/tablet, fixed on desktop; sticky topbar with hamburger. x-cloak + overflow-x-clip guards. - Blade component kit (tokens only; no inline styles except progress width): x-icon (Lucide inline SVG), x-status-dot/-pill, x-badge, x-nav-item, x-sidebar, x-topbar, x-panel, x-kpi, x-ring (SVG gauge), x-server-item. - Dashboard (full-page Livewire) with mock fleet held in the component: KPI grid (1->2->4), live-load sparkline + resource rings, server list, systemd table, audit log. German, no emoji, status via color/dots/pills. - Verified rendered at 1366px (desktop) via headless screenshot. - docs/install-update-design.md: install/TLS/self-update architecture (analysis). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-12 01:10:23 +02:00

Author

SHA1

Message

Date

boban

2b245c3d3a

feat(wireguard): SSH lock + peer config download (v0.9.40)

Two dashboard additions to the WireGuard page:

- Peer config download: the show-once new-client view gets a "Download"
  button next to the QR code (streams clusev-wireguard.conf) plus an
  inline hint explaining QR-on-phone vs download-on-PC import.

- SSH lock (port 22): an optional toggle in WireGuard settings that walls
  off host SSH to the tunnel via a dedicated CLUSEV-WG-SSH chain on the
  host INPUT chain. Fail-open by construction: ESTABLISHED,RELATED + lo +
  wg0 + WG-subnet RETURN before the DROP (live sessions survive, SSH over
  the tunnel stays open); _ssh_gate_on refuses while wg0 is down; the boot
  unit's ConditionPathExists=wg0 and an in-function self-guard keep a
  broken tunnel from ever applying the DROP; ssh_gate_apply re-validates
  the subnet shape and fails open on a corrupt wg.env. Strong lock-out
  warning shown inline AND in the confirm modal (recommend a backup peer).
  New CLI escapes: clusev wg ssh-lock / ssh-unlock; clusev wg down clears
  both gates. Panel gate and SSH gate are independent toggles.

Write-bridge: new gate-ssh-on/gate-ssh-off actions (no args, host
whitelist + ConfirmToken wgSshGate, single-use uid-bound). Status collector
now reports gate.ssh. Adversarial lock-out review: all 8 failure modes
refuted. 348 tests pass, shellcheck clean, Pint clean, R12 verified.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-21 09:25:19 +02:00

boban

6302ef5e7a

feat: v1 dashboard UI — app shell + component kit + mock fleet

- Responsive app shell: sidebar (brand, server switcher, nav, user) as an
  off-canvas drawer on mobile/tablet, fixed on desktop; sticky topbar with
  hamburger. x-cloak + overflow-x-clip guards.
- Blade component kit (tokens only; no inline styles except progress width):
  x-icon (Lucide inline SVG), x-status-dot/-pill, x-badge, x-nav-item,
  x-sidebar, x-topbar, x-panel, x-kpi, x-ring (SVG gauge), x-server-item.
- Dashboard (full-page Livewire) with mock fleet held in the component: KPI
  grid (1->2->4), live-load sparkline + resource rings, server list, systemd
  table, audit log. German, no emoji, status via color/dots/pills.
- Verified rendered at 1366px (desktop) via headless screenshot.
- docs/install-update-design.md: install/TLS/self-update architecture (analysis).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-12 01:10:23 +02:00

2 Commits (31852fc04c16c429bd9aa9713e2af7dd8640e5d4)