Repository navigation

Hardening plan 1 - #1

Merged

JonTelep merged 20 commits into

mainfrom

hardening-plan-1

Jul 11, 2026

Merged

Hardening plan 1#1
JonTelep merged 20 commits into
mainfrom
hardening-plan-1

Commits on Jul 7, 2026
- docs: add hardening plan 1
  
  JonTelep
  and
  claude
  committed
  785f3bb
- feat: wire up keep_releases for image retention (Task 1.1)
  
  JonTelep
  and
  claude
  committed
  92431d7
- fix: detect conflicting DNS records in tunnel RouteDNS (Task 1.2)
  
  JonTelep
  and
  claude
  committed
  3916daf
- fix: zero-downtime start-then-switch restart (Task 1.3)
  
  JonTelep
  and
  claude
  committed
  3945e6b
- fix: atomic writes for state, config, and env files (Task 1.4)
  
  JonTelep
  and
  claude
  committed
  9c8704b
- fix: reject duplicate domains at app creation (Task 1.5)
  
  JonTelep
  and
  claude
  committed
  d349cb3
- fix: queue webhook deploys behind the deploy lock (Task 1.6)
  
  JonTelep
  and
  claude
  committed
  20ef143
- fix: never remove a live same-name container during deploy (Task 1.7)
  
  JonTelep
  and
  claude
  committed
  0de6d3b
- feat: pin and checksum-verify cloudflared; add tunnel upgrade (Task 2.1)
  
  JonTelep
  and
  claude
  committed
  24c8e0e
- fix: keep tunnel credentials in /etc/cloudflared (Task 2.2)
  
  JonTelep
  and
  claude
  committed
  2170571
Commits on Jul 8, 2026
- fix: HTTP timeouts for apt-key download and webhook server (Task 2.3)
  
  JonTelep
  and
  claude
  committed
  555dcf8
- feat: configurable health_timeout and TCP liveness fallback (Task 2.4)
  
  JonTelep
  and
  claude
  committed
  b991d83
- feat: note leftover Cloudflare DNS record when removing a tunneled app (Task 2.5)
  
  JonTelep
  and
  claude
  committed
  ba74db8
- fix: save state before switching traffic in deploy (Task 2.6)
  
  JonTelep
  and
  claude
  committed
  d148922
- feat: post-deploy end-to-end edge verification (Task 3.1)
  
  JonTelep
  and
  claude
  committed
  f84804e
- feat: token-based non-interactive tunnel setup (Task 3.2)
  
  JonTelep
  and
  claude
  committed
  601dc60
- feat: rollback --to <sha> and seploy releases (Task 3.3)
  
  JonTelep
  and
  claude
  committed
  9e8328a
- feat: disk-space preflight and build timeout (Task 3.4)
  
  JonTelep
  and
  claude
  committed
  23fb8b6
- feat: deploy --all and --no-cache flags (Task 3.5)
  
  JonTelep
  and
  claude
  committed
  114b5ab
- future utilities
  JonTelep
  committed
  f3fde78

Commits

Commits on Jul 7, 2026

Commits on Jul 8, 2026