summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorLines
4 daysFix ExecStop failure when tmux session has already exitedHEADmasteryyamashita-1/+1
4 daysUI: stack admin buttons verticallyyyamashita-1/+1
4 daysDedupe Caddyfile with snippets, sync docs with reality, add tests/check.shyyamashita-28/+156
13 daysRestrict proxy to Japan IPs using ipdeny.com CIDR listyyamashita-15/+12
13 daysAdd GeoIP Japan-only filter to forward proxyyyamashita-6/+27
13 daysFix HTTP proxy directive order: forward_proxy must run before rediryyamashita-1/+1
13 dayscaddy: add --build to deploy.sh so entrypoint changes are picked upyyamashita-2/+1
13 daysFix HTTP proxy: use catch-all http:// block for port 80yyamashita-1/+2
13 daysDisable proxy auth permanently (PROXY_NO_AUTH=1)yyamashita-0/+2
13 daysRe-enable proxy auth (remove PROXY_NO_AUTH=1)yyamashita-2/+0
13 daysAdd global order option for forward_proxy directiveyyamashita-0/+4
13 daysFix forward_proxy config: remove unsupported hide_ip/hide_via directivesyyamashita-6/+2
13 daysTemporarily disable proxy auth (PROXY_NO_AUTH=1)yyamashita-2/+4
13 daysMove forward proxy from Squid to Caddy (port 80/443)yyamashita-116/+66
13 daysAdd HTTPS forward proxy service (Squid on port 8443)yyamashita-1/+121
13 daysRe-enable IKE fragmentation (remove fragmentation=no)yyamashita-1/+0
13 daysForce send ISRG Root X1 via local.cacerts for Android compatyyamashita-0/+1
13 daysAppend issuer root CA to cert chain for Android IKEv2 compatyyamashita-0/+14
14 daysRemove cert logic duplication from vpn/install.shyyamashita-58/+17
14 daysUnify install.sh pattern: always delegate to deploy.shyyamashita-4/+4
14 daysForce RSA4096 cert for VPN domain to fix iOS IKEv2yyamashita-0/+3
14 daysSend full cert chain to fix iOS IKEv2 validationyyamashita-3/+3
2026-07-02Disable IKE fragmentation, use IP-level fragmentation for iOSyyamashita-1/+2
2026-07-02Send only YE1+RootYE intermediates, skip cross-signed ISRG Root X2yyamashita-0/+3
2026-07-02Fix VPN cert chain: split multi-cert PEM for strongSwanyyamashita-1/+18
2026-07-02Restore intermediate cert + reduce IKE fragment size to 512 bytesyyamashita-0/+2
2026-07-01Remove intermediate CA cert to fix IKE fragmentationyyamashita-1/+0
2026-07-01Revert VPN file logging (caused container crash)yyamashita-9/+0
2026-07-01Add file logging to VPN container for diagnosticsyyamashita-0/+9
2026-07-01Revert fragmentation=no to restore iPhone VPN connectivityyyamashita-1/+0
2026-07-01Fix IKE fragmentation: use fragmentation=no instead of fragment_size=0yyamashita-1/+1
2026-07-01Restore intermediate CA cert, disable IKE fragmentationyyamashita-0/+2
2026-07-01Serve YE1 intermediate CA cert for Android VPN trust chainyyamashita-1/+18
2026-07-01Remove intermediate CA cert mount to fix Android IKEv2 fragmentationyyamashita-1/+0
2026-07-01Fix VPN: send certificate always, split cert chain, fix entrypointyyamashita-16/+21
2026-06-30Fix VPN entrypoint: handle sysctl read-only in host network modeyyamashita-3/+7
2026-06-30Add strongSwan IKEv2 VPN serviceyyamashita-1/+270
2026-06-20Add Restart Claude Sessions command to hetzner-adminyyamashita-0/+10
2026-06-19Add microblog serviceyyamashita-1/+16
2026-06-19Add microblog repo and Claude sessionyyamashita-0/+2
2026-06-19Rename hetzner-admin domain and use CNAME for web subdomainsyyamashita-7/+53
2026-06-19Add hetzner-admin: SSH-based server management web UIyyamashita-7/+207
2026-06-10Add mosquitone-admin repo and Claude sessionyyamashita-0/+6
2026-06-09Switch mail container from SES relay to direct deliveryyyamashita-14/+2
2026-06-02Revert "Add cron job registration to install.sh"yyamashita-18/+0
2026-06-02Add cron job registration to install.shyyamashita-0/+18
2026-06-01Add libsasl2-modules to mail container for Postfix SASL authyyamashita-0/+1
2026-06-01Configure Amazon SES relay for Postfix (port 25 blocked by Hetzner)yyamashita-2/+14
2026-06-01entrypoint: copy resolv.conf etc into Postfix chroot before startyyamashita-0/+8
2026-06-01entrypoint: fix DNS via cat-to-bind-mount (no python3/sed needed)yyamashita-9/+5