studio/tuwunel
2
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
6,146 Commits 2 Branches 0 Tags
505b331534de36a8e5578e2a1b941aa5f5273102
Commit Graph

6146 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
André Lametti
505b331534 Docs: add example for root domain delegation 
- Change link in README to internal documentation link; original more
  detailed link is preserved in documentation page as a reference.
- Add Caddy example.

TODO:
- [x] Add example for Caddy
- [ ] Add example for Traefik
 2026-03-04 16:06:02 -05:00
André Lametti
b81ef81a70 Docs: add example for root domain delegation 
Although the procedure is documented in the example configuration file,
whether it is possible to use the root domain as the server name of a
tuwunel instance hosted on a subdomain, and a practical example of doing
so, is often requested in the unofficial support matrix room.

TODO:
- [ ] Add example for Caddy
- [ ] Add example for Traefik
 2026-03-04 16:06:01 -05:00
André Lametti
0ee71890ed Add missing docs index entry for podman 2026-03-04 10:58:12 -05:00
André Lametti
a023ca3771 Fix typo in quote order 2026-03-04 09:28:13 -05:00
André Lametti
dfcf157b59 Declare tuwunel upstream in single block 
This is essentially a variable so it is more clear to use an `upstream`
declaration in case the IP or port changes.
 2026-03-04 08:57:14 -05:00
Jason Volk
59791db213 Add db migration and further origin-overwrite rectifications. (6bed0d38f) (#313) 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:44 +00:00
Jason Volk
d00cfcb85a Merge remote-tracking branch 'hatomist/fix/sso-origin-overwrite' 2026-03-03 06:12:26 +00:00
June Strawberry
5a55f84104 add rpm/sysusers, temporarily fix rpm/postinst 
Signed-off-by: June Strawberry <june@vern.cc>
 2026-03-03 06:12:09 +00:00
Jason Volk
9e75453303 Add TaskMonitor interval metrics w/ admin command. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
Jason Volk
bf8ae48ec2 Tweak default malloc conf. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
Jason Volk
39cf124813 Refactor conflicted_subgraph into stream::unfold() pattern. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
Jason Volk
9fb6594975 Fix db pool worker debug busy-counter from underflowing. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
Jason Volk
63b0014f8f Split topological_sort; semi try_unfold refactor. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
Jason Volk
357a5b7a74 Stub database stream size_hint(); use proper accessor methods for cursor state. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
Jason Volk
d959dd740f Optimize get_shared_rooms()/intersection_sorted_stream2() for tighter loops. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
Jason Volk
e9ca105d79 Use assert_eq to print values on test failures. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
Jason Volk
254b53adf4 Split auth_chain shortid and eventid gathering callstacks. 
Optimize event parse for auth_chain auth_events fetch.

Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
Jason Volk
42570a5a7c Optimize sequential auth_chain chasing in power_sort. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
Jason Volk
9ede830ffe Move state_res from tuwunel_core to tuwunel_service. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
Jason Volk
6a550baf5f Add generic timeline.get_pdu suite to deserialize into other structs. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-03 06:12:09 +00:00
June Strawberry
ddb42fe523 update complement results 
Signed-off-by: June Strawberry <june@vern.cc>
 2026-03-01 07:29:06 +00:00
June Strawberry
e47c0a7200 bump ruma to fix display_name and avatar_url being omitted in /joined_members 
Signed-off-by: June Strawberry <june@vern.cc>
 2026-03-01 07:29:06 +00:00
Jason Volk
cb219c2135 Additional new nightly lint fixes. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-01 07:29:06 +00:00
Donjuanplatinum
e178c12b6e clippy fix 2026-03-01 07:29:06 +00:00
Jason Volk
cbbe370df2 Improve tokio thread naming schema; cleanup. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-03-01 07:29:06 +00:00
Jason Volk
0933943dd6 Remove bad_event_ratelimiter entries after expiration. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-27 22:20:54 +00:00
Enginecrafter77
1a434443b9 Add option to disable password authorization flow 2026-02-26 05:28:09 +00:00
Jason Volk
591014c190 Allow subject to be listed in a provider's userid_claims with special precedence. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-26 05:21:33 +00:00
Jason Volk
99bbcb34b6 Add config option to bypass cookie checking on SSO callback. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-26 05:04:19 +00:00
Jason Volk
9e09162817 Mitigate issues from low RLIMIT_NPROC defaults. (fixes #337) 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-26 01:47:20 +00:00
Jason Volk
081394c313 Additional metrics on shutdown from rusage. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-26 00:57:51 +00:00
Jason Volk
37818e1a25 Add getrusage suite to sys. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-26 00:57:51 +00:00
Jason Volk
340b05d88e Add rlimit getters for max threads, et al. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-26 00:57:51 +00:00
Jason Volk
2d1a76a169 Integrate nix::errno into Error. 
Split sys/limits.rs; float dep:nix version.

Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-26 00:57:51 +00:00
Jason Volk
a910dc2777 Raise default jemalloc muzzy threshold. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-26 00:57:51 +00:00
Jason Volk
0b9df31a41 Add explicit edition in rustfmt.toml for wider editor/ide compat. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-25 15:13:03 +00:00
Jason Volk
c8a71a4842 Fix missing feature flags for jsonwebtoken dependency. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-25 15:13:03 +00:00
dasha_uwu
9dfba5904b Don't grant admin if the first registered user is an appservice, fixes #331 2026-02-25 05:27:43 +05:00
dasha_uwu
9a02219172 Clarify appservice device_management error message 2026-02-25 05:27:43 +05:00
dasha_uwu
d073e17f1a Refactor RegistrationInfo, fix #330 2026-02-25 05:27:43 +05:00
dasha_uwu
83a23e965b Update contact information 2026-02-25 05:27:43 +05:00
dasha_uwu
b0bdf2d8d9 Refactor admin media 2026-02-24 09:03:52 +05:00
dasha_uwu
7bf87cfb33 Refactor admin rooms alias 2026-02-24 09:03:52 +05:00
dasha_uwu
45f4496e4f Refactor admin rooms moderation 
Split alias.*_alias_by from alias.*_ailias
 2026-02-24 09:03:52 +05:00
dasha_uwu
6014c0fd6c Refactor admin debug 2026-02-24 09:03:52 +05:00
dasha_uwu
01194bfc7b Refactor admin appservice 2026-02-24 09:03:52 +05:00
dasha_uwu
887479d9c7 Add admin rooms prune-empty to delete empty rooms 2026-02-24 09:03:52 +05:00
dasha_uwu
3d9587d971 Refactor admin rooms 2026-02-24 09:03:52 +05:00
dasha_uwu
129ca52463 Don't apply command handler prefix to subcommand modules 2026-02-24 09:03:52 +05:00
dasha_uwu
d23f7f7e81 Fix encryption_enabled_by_default_for_room_type 
When set to "invite" all rooms were created with encryption
 2026-02-22 14:18:56 +05:00