gandalf/secubox-deb
0
1
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-29 17:36:56 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
7d971bbb88
secubox-deb/packages/secubox-haproxy/api
History
CyberMind-FR 94c7351185 fix(secubox-haproxy): drop JWT from /webui/nginx-config (postinst-friendly) 
The endpoint is called by the secubox-render-nginx-webui script via the
secubox-haproxy unix socket. The script has no JWT token at hand (it runs
from postinst triggers as root). Requiring JWT broke the trigger-driven
render flow.

Rationale for making the endpoint public:
- The content is fully derivable from /webui/admin-domain (already public).
- Unix-socket access is root-only at the filesystem level.
- The rendered vhost contains no secrets.

Test updated: test_nginx_config_requires_jwt → test_nginx_config_is_public.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-12 14:10:17 +02:00
..
routers Flatten package structure and remove build artifacts 2026-03-21 16:23:09 +01:00
__init__.py Flatten package structure and remove build artifacts 2026-03-21 16:23:09 +01:00
main.py fix(secubox-haproxy): drop JWT from /webui/nginx-config (postinst-friendly) 2026-05-12 14:10:17 +02:00
webui_identity.py WebUI Obfuscation - admin.HOSTNAME.secubox.in Only (#96) 2026-05-12 14:07:11 +02:00