| Age | Commit message (Expand) | Author | Lines |
|---|
| 2026-08-22 | Add todo service: Caddyfile, repos.txt, hook, DNS entryHEADmaster | yyamashita | -0/+15 |
| 2026-07-11 | Fix ExecStop failure when tmux session has already exited | yyamashita | -1/+1 |
| 2026-07-11 | UI: stack admin buttons vertically | yyamashita | -1/+1 |
| 2026-07-11 | Dedupe Caddyfile with snippets, sync docs with reality, add tests/check.sh | yyamashita | -28/+156 |
| 2026-07-03 | Restrict proxy to Japan IPs using ipdeny.com CIDR list | yyamashita | -15/+12 |
| 2026-07-03 | Add GeoIP Japan-only filter to forward proxy | yyamashita | -6/+27 |
| 2026-07-03 | Fix HTTP proxy directive order: forward_proxy must run before redir | yyamashita | -1/+1 |
| 2026-07-03 | caddy: add --build to deploy.sh so entrypoint changes are picked up | yyamashita | -2/+1 |
| 2026-07-03 | Fix HTTP proxy: use catch-all http:// block for port 80 | yyamashita | -1/+2 |
| 2026-07-03 | Disable proxy auth permanently (PROXY_NO_AUTH=1) | yyamashita | -0/+2 |
| 2026-07-03 | Re-enable proxy auth (remove PROXY_NO_AUTH=1) | yyamashita | -2/+0 |
| 2026-07-02 | Add global order option for forward_proxy directive | yyamashita | -0/+4 |
| 2026-07-02 | Fix forward_proxy config: remove unsupported hide_ip/hide_via directives | yyamashita | -6/+2 |
| 2026-07-02 | Temporarily disable proxy auth (PROXY_NO_AUTH=1) | yyamashita | -2/+4 |
| 2026-07-02 | Move forward proxy from Squid to Caddy (port 80/443) | yyamashita | -116/+66 |
| 2026-07-02 | Add HTTPS forward proxy service (Squid on port 8443) | yyamashita | -1/+121 |
| 2026-07-02 | Re-enable IKE fragmentation (remove fragmentation=no) | yyamashita | -1/+0 |
| 2026-07-02 | Force send ISRG Root X1 via local.cacerts for Android compat | yyamashita | -0/+1 |
| 2026-07-02 | Append issuer root CA to cert chain for Android IKEv2 compat | yyamashita | -0/+14 |
| 2026-07-02 | Remove cert logic duplication from vpn/install.sh | yyamashita | -58/+17 |
| 2026-07-02 | Unify install.sh pattern: always delegate to deploy.sh | yyamashita | -4/+4 |
| 2026-07-02 | Force RSA4096 cert for VPN domain to fix iOS IKEv2 | yyamashita | -0/+3 |
| 2026-07-02 | Send full cert chain to fix iOS IKEv2 validation | yyamashita | -3/+3 |
| 2026-07-02 | Disable IKE fragmentation, use IP-level fragmentation for iOS | yyamashita | -1/+2 |
| 2026-07-02 | Send only YE1+RootYE intermediates, skip cross-signed ISRG Root X2 | yyamashita | -0/+3 |
| 2026-07-02 | Fix VPN cert chain: split multi-cert PEM for strongSwan | yyamashita | -1/+18 |
| 2026-07-02 | Restore intermediate cert + reduce IKE fragment size to 512 bytes | yyamashita | -0/+2 |
| 2026-07-01 | Remove intermediate CA cert to fix IKE fragmentation | yyamashita | -1/+0 |
| 2026-07-01 | Revert VPN file logging (caused container crash) | yyamashita | -9/+0 |
| 2026-07-01 | Add file logging to VPN container for diagnostics | yyamashita | -0/+9 |
| 2026-07-01 | Revert fragmentation=no to restore iPhone VPN connectivity | yyamashita | -1/+0 |
| 2026-07-01 | Fix IKE fragmentation: use fragmentation=no instead of fragment_size=0 | yyamashita | -1/+1 |
| 2026-07-01 | Restore intermediate CA cert, disable IKE fragmentation | yyamashita | -0/+2 |
| 2026-07-01 | Serve YE1 intermediate CA cert for Android VPN trust chain | yyamashita | -1/+18 |
| 2026-07-01 | Remove intermediate CA cert mount to fix Android IKEv2 fragmentation | yyamashita | -1/+0 |
| 2026-07-01 | Fix VPN: send certificate always, split cert chain, fix entrypoint | yyamashita | -16/+21 |
| 2026-06-30 | Fix VPN entrypoint: handle sysctl read-only in host network mode | yyamashita | -3/+7 |
| 2026-06-30 | Add strongSwan IKEv2 VPN service | yyamashita | -1/+270 |
| 2026-06-20 | Add Restart Claude Sessions command to hetzner-admin | yyamashita | -0/+10 |
| 2026-06-19 | Add microblog service | yyamashita | -1/+16 |
| 2026-06-19 | Add microblog repo and Claude session | yyamashita | -0/+2 |
| 2026-06-19 | Rename hetzner-admin domain and use CNAME for web subdomains | yyamashita | -7/+53 |
| 2026-06-19 | Add hetzner-admin: SSH-based server management web UI | yyamashita | -7/+207 |
| 2026-06-10 | Add mosquitone-admin repo and Claude session | yyamashita | -0/+6 |
| 2026-06-09 | Switch mail container from SES relay to direct delivery | yyamashita | -14/+2 |
| 2026-06-02 | Revert "Add cron job registration to install.sh" | yyamashita | -18/+0 |
| 2026-06-02 | Add cron job registration to install.sh | yyamashita | -0/+18 |
| 2026-06-01 | Add libsasl2-modules to mail container for Postfix SASL auth | yyamashita | -0/+1 |
| 2026-06-01 | Configure Amazon SES relay for Postfix (port 25 blocked by Hetzner) | yyamashita | -2/+14 |
| 2026-06-01 | entrypoint: copy resolv.conf etc into Postfix chroot before start | yyamashita | -0/+8 |
