index
:
hetzner-infra
master
Unnamed repository; edit this file 'description' to name the repository.
root
summary
refs
log
tree
commit
diff
log msg
author
committer
range
Age
Commit message (
Expand
)
Author
Lines
4 days
Fix ExecStop failure when tmux session has already exited
HEAD
master
yyamashita
-1
/
+1
4 days
UI: stack admin buttons vertically
yyamashita
-1
/
+1
4 days
Dedupe Caddyfile with snippets, sync docs with reality, add tests/check.sh
yyamashita
-28
/
+156
13 days
Restrict proxy to Japan IPs using ipdeny.com CIDR list
yyamashita
-15
/
+12
13 days
Add GeoIP Japan-only filter to forward proxy
yyamashita
-6
/
+27
13 days
Fix HTTP proxy directive order: forward_proxy must run before redir
yyamashita
-1
/
+1
13 days
caddy: add --build to deploy.sh so entrypoint changes are picked up
yyamashita
-2
/
+1
13 days
Fix HTTP proxy: use catch-all http:// block for port 80
yyamashita
-1
/
+2
13 days
Disable proxy auth permanently (PROXY_NO_AUTH=1)
yyamashita
-0
/
+2
13 days
Re-enable proxy auth (remove PROXY_NO_AUTH=1)
yyamashita
-2
/
+0
13 days
Add global order option for forward_proxy directive
yyamashita
-0
/
+4
13 days
Fix forward_proxy config: remove unsupported hide_ip/hide_via directives
yyamashita
-6
/
+2
13 days
Temporarily disable proxy auth (PROXY_NO_AUTH=1)
yyamashita
-2
/
+4
13 days
Move forward proxy from Squid to Caddy (port 80/443)
yyamashita
-116
/
+66
13 days
Add HTTPS forward proxy service (Squid on port 8443)
yyamashita
-1
/
+121
13 days
Re-enable IKE fragmentation (remove fragmentation=no)
yyamashita
-1
/
+0
13 days
Force send ISRG Root X1 via local.cacerts for Android compat
yyamashita
-0
/
+1
13 days
Append issuer root CA to cert chain for Android IKEv2 compat
yyamashita
-0
/
+14
14 days
Remove cert logic duplication from vpn/install.sh
yyamashita
-58
/
+17
14 days
Unify install.sh pattern: always delegate to deploy.sh
yyamashita
-4
/
+4
14 days
Force RSA4096 cert for VPN domain to fix iOS IKEv2
yyamashita
-0
/
+3
14 days
Send full cert chain to fix iOS IKEv2 validation
yyamashita
-3
/
+3
2026-07-02
Disable IKE fragmentation, use IP-level fragmentation for iOS
yyamashita
-1
/
+2
2026-07-02
Send only YE1+RootYE intermediates, skip cross-signed ISRG Root X2
yyamashita
-0
/
+3
2026-07-02
Fix VPN cert chain: split multi-cert PEM for strongSwan
yyamashita
-1
/
+18
2026-07-02
Restore intermediate cert + reduce IKE fragment size to 512 bytes
yyamashita
-0
/
+2
2026-07-01
Remove intermediate CA cert to fix IKE fragmentation
yyamashita
-1
/
+0
2026-07-01
Revert VPN file logging (caused container crash)
yyamashita
-9
/
+0
2026-07-01
Add file logging to VPN container for diagnostics
yyamashita
-0
/
+9
2026-07-01
Revert fragmentation=no to restore iPhone VPN connectivity
yyamashita
-1
/
+0
2026-07-01
Fix IKE fragmentation: use fragmentation=no instead of fragment_size=0
yyamashita
-1
/
+1
2026-07-01
Restore intermediate CA cert, disable IKE fragmentation
yyamashita
-0
/
+2
2026-07-01
Serve YE1 intermediate CA cert for Android VPN trust chain
yyamashita
-1
/
+18
2026-07-01
Remove intermediate CA cert mount to fix Android IKEv2 fragmentation
yyamashita
-1
/
+0
2026-07-01
Fix VPN: send certificate always, split cert chain, fix entrypoint
yyamashita
-16
/
+21
2026-06-30
Fix VPN entrypoint: handle sysctl read-only in host network mode
yyamashita
-3
/
+7
2026-06-30
Add strongSwan IKEv2 VPN service
yyamashita
-1
/
+270
2026-06-20
Add Restart Claude Sessions command to hetzner-admin
yyamashita
-0
/
+10
2026-06-19
Add microblog service
yyamashita
-1
/
+16
2026-06-19
Add microblog repo and Claude session
yyamashita
-0
/
+2
2026-06-19
Rename hetzner-admin domain and use CNAME for web subdomains
yyamashita
-7
/
+53
2026-06-19
Add hetzner-admin: SSH-based server management web UI
yyamashita
-7
/
+207
2026-06-10
Add mosquitone-admin repo and Claude session
yyamashita
-0
/
+6
2026-06-09
Switch mail container from SES relay to direct delivery
yyamashita
-14
/
+2
2026-06-02
Revert "Add cron job registration to install.sh"
yyamashita
-18
/
+0
2026-06-02
Add cron job registration to install.sh
yyamashita
-0
/
+18
2026-06-01
Add libsasl2-modules to mail container for Postfix SASL auth
yyamashita
-0
/
+1
2026-06-01
Configure Amazon SES relay for Postfix (port 25 blocked by Hetzner)
yyamashita
-2
/
+14
2026-06-01
entrypoint: copy resolv.conf etc into Postfix chroot before start
yyamashita
-0
/
+8
2026-06-01
entrypoint: fix DNS via cat-to-bind-mount (no python3/sed needed)
yyamashita
-9
/
+5
[next]