This website requires JavaScript.
6400c90cb3
Mark review/post-security-fix-review as completed — all 10 criteria PASS
main
glm-5.1
2026-06-12 14:35:34 +00:00
75d9c263cb
Mark fix/upstream-host-validation as completed
glm-5.1
2026-06-12 14:34:24 +00:00
ccb574c259
Merge remote-tracking branch 'origin/fix/fix/upstream-host-validation'
glm-5.1
2026-06-12 14:33:56 +00:00
4ee9486561
feat(upstream-host-validation): validate host part of upstream address in config
glm-5.1
2026-06-12 14:33:48 +00:00
9730d155d2
Mark fix/token-bucket-field-visibility as completed
glm-5.1
2026-06-12 14:33:01 +00:00
64a651242c
Merge remote-tracking branch 'origin/fix/fix/token-bucket-field-visibility'
glm-5.1
2026-06-12 14:32:36 +00:00
cf3f00fc53
fix(token-bucket-field-visibility): make TokenBucket fields private except last_access
glm-5.1
2026-06-12 14:32:29 +00:00
a8155d92f9
Mark fix/tls-mode-wildcard-mismatch as completed
glm-5.1
2026-06-12 14:31:08 +00:00
717ee8e6cd
Merge remote-tracking branch 'origin/fix/fix/tls-mode-wildcard-mismatch'
glm-5.1
2026-06-12 14:30:08 +00:00
dbedb8846c
Mark fix/rename-misleading-test as completed
glm-5.1
2026-06-12 14:29:51 +00:00
f6e6e15ebf
feat(fix/tls-mode-wildcard-mismatch): remove unreachable TlsMode wildcard arm and add count mismatch check
glm-5.1
2026-06-12 14:29:48 +00:00
d9b3a436f1
Merge remote-tracking branch 'origin/fix/fix/rename-misleading-test'
glm-5.1
2026-06-12 14:28:41 +00:00
855c0f1d67
fix(rename-misleading-test): rename misleading test and use from_sites in dynamic config test
glm-5.1
2026-06-12 14:28:19 +00:00
8ff8c71783
Mark fix/rate-limiter-connectinfo-tests as completed
glm-5.1
2026-06-12 14:27:08 +00:00
c2201707bb
Merge remote-tracking branch 'origin/fix/fix/rate-limiter-connectinfo-tests'
glm-5.1
2026-06-12 14:25:22 +00:00
603d722ad0
feat(rate-limiter): add ConnectInfo-based tests for rate limiter (ADR-025)
glm-5.1
2026-06-12 14:24:17 +00:00
21186b8265
Mark fix/http-port-type-u16 and fix/log-root-cert-count as completed
glm-5.1
2026-06-12 14:21:37 +00:00
1ae06b0478
Merge remote-tracking branch 'origin/fix/fix/log-root-cert-count'
glm-5.1
2026-06-12 14:21:12 +00:00
8ac39d9cd8
feat(fix/log-root-cert-count): log system root certificate count at startup
glm-5.1
2026-06-12 14:20:43 +00:00
d338dcab38
Merge remote-tracking branch 'origin/fix/fix/http-port-type-u16'
glm-5.1
2026-06-12 14:20:37 +00:00
77117c29eb
feat(http-port-type): change http_port from u32 to u16 per spec (W12)
glm-5.1
2026-06-12 14:20:15 +00:00
9a3b8831c7
Mark fix/json-format-without-logfile as completed
glm-5.1
2026-06-12 14:19:49 +00:00
245d2a69ff
Merge remote-tracking branch 'origin/fix/fix/json-format-without-logfile'
glm-5.1
2026-06-12 14:19:02 +00:00
01e3b1cd9a
Mark 6 fix tasks as completed (admin-socket-resource-limits, upstream-uri-error-handling, remove-dead-code-remnants, acme-contact-validation, admin-socket-reload-mutex-visibility, connector-timeout-ceiling)
glm-5.1
2026-06-12 14:18:23 +00:00
5ea0bee73f
fix(logging): add .json() to stdout-only layer in init_json None branch
glm-5.1
2026-06-12 14:18:17 +00:00
d224d7b409
Merge remote-tracking branch 'origin/fix/fix/connector-timeout-ceiling'
glm-5.1
2026-06-12 14:16:47 +00:00
16ec84eea2
Merge remote-tracking branch 'origin/fix/fix/admin-socket-reload-mutex-visibility'
glm-5.1
2026-06-12 14:15:13 +00:00
b0f83669c0
fix(proxy): raise connector timeout ceiling to 30s per ADR-026
glm-5.1
2026-06-12 14:15:00 +00:00
eb46d9825a
Merge remote-tracking branch 'origin/fix/fix/acme-contact-validation'
glm-5.1
2026-06-12 14:14:55 +00:00
075624368b
Merge remote-tracking branch 'origin/fix/fix/remove-dead-code-remnants'
glm-5.1
2026-06-12 14:14:39 +00:00
80b90b5716
Merge remote-tracking branch 'origin/fix/fix/upstream-uri-error-handling'
glm-5.1
2026-06-12 14:14:02 +00:00
636807d26e
Merge remote-tracking branch 'origin/fix/fix/admin-socket-resource-limits'
glm-5.1
2026-06-12 14:13:27 +00:00
159eeda266
feat(admin): gate reload_mutex() with #[cfg(test)]
glm-5.1
2026-06-12 14:11:40 +00:00
66cd116d54
feat(validation): tighten ACME contact validation to require non-empty email with @ sign
glm-5.1
2026-06-12 14:10:28 +00:00
42b74f92af
Remove dead code remnants identified in security review #003
glm-5.1
2026-06-12 14:05:31 +00:00
e2440f2edb
fix: return 502 on upstream URI parse failure instead of dropping query string
glm-5.1
2026-06-12 14:04:03 +00:00
4c6b55a780
Add read timeout and line length limit to admin socket (ADR-027)
glm-5.1
2026-06-12 14:03:22 +00:00
db982e9c4d
Mark fix/inflight-counter-increment, fix/consolidate-config-types, fix/rate-limiter-ip-source as completed
glm-5.1
2026-06-12 14:02:02 +00:00
e6d22bdcb8
Merge remote-tracking branch 'origin/fix/fix/rate-limiter-ip-source'
glm-5.1
2026-06-12 14:01:16 +00:00
ad9b9b9b78
fix(rate_limit): use ConnectInfo as sole IP source, reject without it
glm-5.1
2026-06-12 14:00:31 +00:00
77ea1160de
Merge remote-tracking branch 'origin/fix/fix/consolidate-config-types'
glm-5.1
2026-06-12 14:00:10 +00:00
1ba1d2a4de
Consolidate config types: remove RawConfig, use FullConfig in load_config
glm-5.1
2026-06-12 13:58:36 +00:00
05fea1a8e2
Fix InFlightCounter: increment in new(), use new() constructor, drain interval 100ms
glm-5.1
2026-06-12 13:58:04 +00:00
54f1725173
Decompose security review #003 findings into 17 fix tasks and 1 review task
glm-5.1
2026-06-12 13:42:37 +00:00
80d1fd0fb3
Update architecture docs to address security review #003 findings
glm-5.1
2026-06-12 13:17:39 +00:00
4f537c80d2
Add security and bug review #003 (4 critical, 12 warnings, 10 suggestions)
glm-5.1
2026-06-12 13:03:20 +00:00
c8ab794ef3
Add LICENSE, README, AGENTS.md, and deployment setup guide
glm-5.1
2026-06-12 11:42:08 +00:00
0d54eba41e
Update architecture specs to reflect live deployment findings and fix two bugs
glm-5.1
2026-06-12 11:28:31 +00:00
c2eefddb4f
Disable ANSI colors in logs and fix fail2ban regex
glm-5.1
2026-06-12 10:15:50 +00:00
9ebb8ee7a8
Fix HTTP/2 support: use ALPN-based protocol detection and fallback to URI host
glm-5.1
2026-06-12 06:14:46 +00:00
da28ea749d
Mark fix/clean-dead-code as completed
glm-5.1
2026-06-12 05:13:10 +00:00
cfba7491ae
Merge branch 'fix/fix/clean-dead-code'
glm-5.1
2026-06-12 05:12:47 +00:00
cbcd746c9f
Remove dead_code annotations and add #[non_exhaustive] to public enums
glm-5.1
2026-06-12 05:12:32 +00:00
8f3c56e6bc
Mark fix/add-code-comments as completed
glm-5.1
2026-06-12 05:05:36 +00:00
9b3fe23499
Add clarifying comments for correct-but-non-obvious behaviors (C3, W8, W10, W11, S9)
glm-5.1
2026-06-12 05:05:10 +00:00
516efb0403
Mark fix/connect-timeout as completed
glm-5.1
2026-06-12 05:02:41 +00:00
0c769e682e
Wire upstream_connect_timeout_secs to enforce separate connect timeout
glm-5.1
2026-06-12 05:01:54 +00:00
1da01a2336
Mark fix/graceful-shutdown as completed
glm-5.1
2026-06-12 05:00:03 +00:00
6cb0f8e6fe
Merge branch 'fix/fix/graceful-shutdown' into fix/acme-contact-and-challenge
glm-5.1
2026-06-12 04:59:32 +00:00
280fe782a1
Implement graceful shutdown for listeners, admin socket, eviction task, and ACME
glm-5.1
2026-06-12 04:59:18 +00:00
9bdc2b72af
Add acme_contact to test config TOML strings
fix/acme-contact-and-challenge
glm-5.1
2026-06-12 04:48:25 +00:00
abc8a44134
Mark fix/request-timeout-scope as completed
glm-5.1
2026-06-12 04:47:15 +00:00
3f20c9d01f
Add request timeout scope comment (fix/request-timeout-scope)
glm-5.1
2026-06-12 04:47:06 +00:00
f02670d5ef
Mark Batch 2 tasks as completed (remove-health, access-logging, acme-contact)
glm-5.1
2026-06-12 04:46:34 +00:00
5529cf2add
Merge branch 'fix/fix/access-logging'
glm-5.1
2026-06-12 04:46:26 +00:00
4cdc3aa0b8
Merge branch 'fix/fix/remove-health-and-hardcode-https'
glm-5.1
2026-06-12 04:44:54 +00:00
3f2550fa20
Fix ACME contact email wiring and remove unused challenge config
glm-5.1
2026-06-12 04:44:41 +00:00
23c8b74058
Wire up access logging in proxy handler
glm-5.1
2026-06-12 04:43:59 +00:00
a826106673
Remove /health route from main listener and hardcode X-Forwarded-Proto to https
glm-5.1
2026-06-12 04:43:59 +00:00
19efbd42ee
Mark fix/normalize-host-ipv6 as completed
glm-5.1
2026-06-12 04:41:52 +00:00
f59a86a8cf
Merge branch 'fix/fix/normalize-host-ipv6'
glm-5.1
2026-06-12 04:41:20 +00:00
42c721e954
fix: normalize_host handles IPv6 bracket notation
glm-5.1
2026-06-12 04:40:43 +00:00
53d601522e
Mark fix/config-reload-static-drift as completed
glm-5.1
2026-06-12 04:36:34 +00:00
a78e3bf374
Fix ConfigReloadHandle static config drift causing stale diff warnings
glm-5.1
2026-06-12 04:35:20 +00:00
d7f811ffb5
Mark fix/logging-test-global-subscriber as completed
glm-5.1
2026-06-12 04:29:48 +00:00
634ceb365a
Merge branch 'fix/fix/logging-test-global-subscriber'
glm-5.1
2026-06-12 04:29:40 +00:00
667495cf43
fix(logging): handle global subscriber conflict in test
glm-5.1
2026-06-12 04:29:28 +00:00
c50d2e8d1b
Mark fix/http-port-validation as completed
glm-5.1
2026-06-12 04:29:02 +00:00
d24148dae9
Add http_port range validation (0 or 1-65535)
glm-5.1
2026-06-12 04:28:35 +00:00
53ef5b32c3
Mark fix/fragile-error-detection as completed
glm-5.1
2026-06-12 04:25:49 +00:00
8f9e3b639d
Merge branch 'fix/fix/fragile-error-detection'
glm-5.1
2026-06-12 04:25:35 +00:00
067f8a9012
fix: use typed hyper::Error::is_incomplete_message() instead of fragile string matching
glm-5.1
2026-06-12 04:25:11 +00:00
4db4ecbeb9
Mark fix/integration-test-toml as completed
glm-5.1
2026-06-12 04:23:27 +00:00
c4872cb88c
fix: correct TOML nesting from [[listeners.listeners.sites]] to [[listeners.sites]]
glm-5.1
2026-06-12 04:22:46 +00:00
426333eeda
Mark fix/token-bucket-nanosecond as completed
glm-5.1
2026-06-12 04:22:35 +00:00
a701c82c90
fix: use nanosecond precision in token bucket refill calculation
glm-5.1
2026-06-12 04:21:53 +00:00
f9d7b8112b
Decompose implementation review fixes into 14 atomic tasks with post-fix review
glm-5.1
2026-06-12 04:08:45 +00:00
fe1ae6c05e
Resolve all open questions, remove /health from main listener (ADR-022)
glm-5.1
2026-06-12 03:39:52 +00:00
68d27c4789
Triage implementation review findings and update architecture specs
glm-5.1
2026-06-11 15:04:09 +00:00
5478df7ab7
Add W13-W14, S9-S11 findings to implementation review
glm-5.1
2026-06-11 14:49:50 +00:00
39e1b82308
Add post-implementation code review (4 critical, 12 warning, 8 suggestion findings)
glm-5.1
2026-06-11 14:20:06 +00:00
57cb071ff2
Fix task status: 'complete' -> 'completed' for taskgraph compatibility
glm-5.1
2026-06-11 14:06:20 +00:00
cf002cc40f
Fix spec deviations and implement graceful shutdown drain
glm-5.1
2026-06-11 14:01:55 +00:00
9e11e755ea
Mark integration/startup-orchestration as complete
glm-5.1
2026-06-11 13:46:46 +00:00
7bed7db615
Wire startup orchestration: correct sequence, middleware order, TLS, ConnectInfo, sd_notify
glm-5.1
2026-06-11 13:45:39 +00:00
3754b40904
Mark deploy/systemd-and-container as complete
glm-5.1
2026-06-11 13:42:57 +00:00
6d497eb5d3
Add systemd unit, Dockerfile, docker-compose, and fail2ban configs for production deployment
glm-5.1
2026-06-11 13:42:08 +00:00
5d1e29fde9
Mark tls/tls-listener-setup as complete
glm-5.1
2026-06-11 13:40:14 +00:00
e0f7e100d9
Merge feat/tls/tls-listener-setup into main
glm-5.1
2026-06-11 13:40:04 +00:00
7ccb2ae64f
feat: implement multi-listener TLS setup with ConnectInfo propagation
glm-5.1
2026-06-11 13:38:39 +00:00