openhands f0c27eb815 feat(security): Cloudflare-aware IP trust and admin-tunable anti-DDoS ...

- resolveClientIp: trust cf-connecting-ip only behind cf-ray/cdn-loop, use nginx x-real-ip otherwise (anti-spoof)
- antiddos-config: Redis-backed live config (antiddos:config) with 30s cache, 13 ANTI_DDOS_* env vars
- ddos-guard: consume tunable rates/tiers via getAntiddosConfig
- admin panel at /admin/devops/antiddos (save/reset/unban actions, PERMS.SETTINGS_VIEW)
- register new admin page in housekeeping migration matrix (146 -> 147)

2026-09-22 22:22:51 +02:00

..

(site)

ci: run all workflows on the self-hosted host runner

2026-09-22 20:59:02 +02:00

admin

feat(security): Cloudflare-aware IP trust and admin-tunable anti-DDoS

2026-09-22 22:22:51 +02:00

admin-next

feat(housekeeping): add per-hotel theme manager with import/export and background

2026-09-16 19:45:57 +02:00

api

fix(imaging): make avatar and badge images resilient to upstream outages

2026-09-20 12:58:55 +02:00

client

fix(security): authorize site uploads and harden tokens, media and request identity

2026-09-13 19:24:43 +02:00

imaging

Make avatar imager resilient with upstream fallback everywhere

2026-09-14 17:35:36 +02:00

mod

fix(avatar): render onError avatars only in client components

2026-09-15 11:43:47 +02:00

error.tsx

feat(admin): add production error center and refresh CMS dependencies

2026-09-05 19:53:09 +02:00

global-error.tsx

feat(admin): add production error center and refresh CMS dependencies

2026-09-05 19:53:09 +02:00

globals.css

fix(styles): generate shadcn color utilities via inline theme tokens

2026-09-20 16:44:45 +02:00

layout.tsx

feat(ui): add global progress bar for navigation feedback

2026-09-13 14:44:46 +02:00

loading.tsx

Improvements: remove dead config, fix ESM, add URL validation, unify types, add missing logging

2026-07-26 20:28:11 +02:00

manifest.ts

feat(docker): prepare portable images with runtime hotel configuration

2026-09-07 22:37:53 +02:00

not-found.tsx

fix: disable route prefetching app-wide to avoid spurious requests

2026-08-29 19:27:13 +02:00

robots.ts

feat(docker): prepare portable images with runtime hotel configuration

2026-09-07 22:37:53 +02:00

sitemap.ts

feat(docker): prepare portable images with runtime hotel configuration

2026-09-07 22:37:53 +02:00