Skip to content

v0.4.1

Choose a tag to compare

View all tags
@GilbN GilbN released this 22 Jul 12:09
· 790 commits to main since this release
v0.4.1
80822d5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Added

  • APP_SESSION_SECURE (default false): mark the session cookie Secure;
    recommended behind a TLS reverse proxy.
  • APP_TRUSTED_PROXIES (IPs/CIDRs, default empty): trust X-Forwarded-For
    from these proxies so the app can resolve real client IPs.
  • Login successes and failures are now logged with username and client IP.

Fixed

  • /ws/live and /ws/crowdsec now send an empty keepalive frame after 30s of
    silence so reverse proxies (nginx proxy_read_timeout, 60s default / 240s in
    SWAG) no longer cut idle live-feed connections on quiet servers.
  • WebSocket reconnect backoff (/ws/live, /ws/crowdsec) resets on a valid
    frame instead of on open, ending the 1s reconnect loop while the server
    closes with 1013.
  • The /ws/crowdsec client ignores non-string/malformed frames instead of
    throwing.
  • fix(frontend): don't reset WS reconnect backoff on open; guard /ws/crowdsec frame parsing by @GilbN in #36
  • fix(ws): send idle keepalive frames on /ws/live and /ws/crowdsec by @GilbN in #38
  • Reverse-proxy hardening: trusted-proxy client IPs, login logging, Secure cookie, proxy docs by @GilbN in #37
  • 0.4.1 by @GilbN in #39

Full Changelog: 0.4.0...v0.4.1

Contributors

GilbN
Assets 2
Loading