92969eb0dc
- reverbClient() now returns wss://<domain>:443 when the active domain is being served (the HTTPS front door), instead of deriving wss://host:80 from a request that looks like plain HTTP:80 behind an external TLS proxy. Bare-IP recovery stays plain ws. - Caddy no longer redirects the /app/* /apps/* WS paths to https when the upstream already terminated TLS (X-Forwarded-Proto: https) — that redirect broke the WebSocket in external-proxy mode. - The 'TLS active' status card no longer claims Let's Encrypt issuance in external-proxy mode; it states TLS is provided by the upstream proxy. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| .gitkeep | ||
| DeploymentService.php | ||
| Fail2banService.php | ||
| FirewallService.php | ||
| FleetService.php | ||
| HardeningService.php | ||
| MaintenanceService.php | ||
| SessionService.php | ||
| SshKeyProvisioner.php | ||
| WebauthnService.php | ||