feat(portal): VPN Landing Portal (Roadmap #6) — Phase 1 - #175

Merged

CallMeTechie merged 16 commits into

feature/vpn-landing-portal

Jun 24, 2026

Commits on Jun 23, 2026

feat(portal): source-IP→direct-peer identity middleware
CallMeTechie
committed
36fffd6
feat(portal): source-IP-scoped portal data API (/api/v1/portal/*)
CallMeTechie
committed
64ffcb1
fix(portal): restrict /services to HTTP routes (exclude L4/RDP)
CallMeTechie
committed
439dc71
feat(portal): settings toggles (master + per-widget)
CallMeTechie
committed
fbdfe33
feat(portal): server-rendered portal page route + template
CallMeTechie
committed
4d7d917
fix(portal): nonce the no-FOUC inline head script (CSP)
CallMeTechie
committed
ad0cd5f
feat(portal): portal.css design system (dark + papier, self-hosted fonts)
CallMeTechie
committed
1696dff
feat(portal): portal.js widget hydration + states + real traffic series
CallMeTechie
committed
97552c9
fix(portal): stable services card height on load; tidy traffic helper + deterministic test
CallMeTechie
committed
b565735
feat(portal): i18n strings (en + de) + client-side i18n map
CallMeTechie
committed
cfbd469
feat(portal): internal home.<domain> Caddy site + dnsmasq name + trusted-IP guard
CallMeTechie
committed
b659174
fix(portal): host-gate identity (anti-forgery), TLS for home host, CSP-safe state CSS, API config gating
CallMeTechie
committed
aea9dab
test(portal): lock in management-vhost identity-header strip (anti-forgery)
CallMeTechie
committed
72602d8
fix(portal): clear CodeQL highs — DOM-safe i18n rendering + Set-based domain test assertions
CallMeTechie
committed
d2cc4c7

Commits on Jun 24, 2026