feat(support): add support service with WebSockets and Yamux#47

Open

edospadoni wants to merge 36 commits into

mainfrom

feature/support-service

Commits on May 26, 2026

feat(support): add support service with WebSocket tunnels and session management
edospadoni
committed
feat(backend): add support session APIs, proxy, and security hardening
edospadoni
committed
feat(frontend): add support dashboard, terminal, and session UI
edospadoni
committed
chore(infra): add support service to proxy, deploy, and CI/CD
edospadoni
committed
fix(ci): use separate component/path in go-tests matrix to avoid slash in artifact name
edospadoni
committed
fix(proxy): add default_server to main server block to prevent support subdomain catch-all
edospadoni
committed
fix(proxy): skip PR suffix and search domain for FQDN service names
edospadoni
committed
fix(support): security audit hardening across support service and backend
edospadoni
committed
fix(support): security audit hardening across support service and backend
edospadoni
committed
fix(proxy): configure pid and cache paths for nginx-unprivileged
edospadoni
committed
fix(proxy): allow Logto domain in CSP connect-src directive
edospadoni
committed
feat(backend): add support_session_id to system responses
edospadoni
committed
feat(frontend): add support session popover to systems table
edospadoni
committed
refactor(support): split tunnel-client into packages and add configurable rate limits
edospadoni
committed
docs(support): add inline descriptions to all .env.example variables
edospadoni
committed
chore(backend): renumber support migrations from 017-019 to 018-020
edospadoni
committed
feat(support): add pluggable diagnostics system to tunnel-client
edospadoni
committed
feat(support): add static service injection via yamux COMMAND stream
edospadoni
committed
fix(security): address all findings from penetration test review
edospadoni
committed
fix(support): add cross-subdomain CORS and session-scoped proxy auth
edospadoni
committed
feat(support): add per-node diagnostics endpoint and multi-node popover display
edospadoni
committed
feat(support): add ephemeral user provisioning for support sessions
edospadoni
committed
feat(support): add custom service management and fix re-discovery merge
edospadoni
committed
fix(security): harden support tunnel system after security audit
edospadoni
committed
docs(support): expand plugin system documentation in README
edospadoni
committed
feat(diagnostics): use structured JSON details in built-in system plugin
edospadoni
committed
fix(diagnostics): use json.RawMessage for structured details in checks
edospadoni
committed
fix(support): show host as primary label in services list, sort alphabetically
edospadoni
committed
fix(tunnel-client): Redis fallback for module discovery on worker nodes
edospadoni
committed
fix(tunnel-client): clean up existing users before provisioning to prevent password mismatch
edospadoni
committed
fix(diagnostics): gofmt alignment in built-in system plugin
edospadoni
committed
fix(tunnel-client): spawn login shell for PTY sessions
edospadoni
committed
fix(frontend): prettier formatting for SupportSessionsTable
edospadoni
committed
chore(backend): go mod tidy after rebase
edospadoni
committed
refactor(support): rename INTERNAL_SECRET to SUPPORT_INTERNAL_SECRET and wire app-secrets group
edospadoni
committed
feat(support): enable subdomain proxy on QA and prod
edospadoni
committed