Commits

Commit history

1. Commits on Oct 8, 2026

   • deploy templates: render NHP knock port from ${NHP_SERVER_PORT}

     Show description for 2559f79
     fengyily

     committed
     2559f79View commit details

     Copy full SHA for 2559f79

     View code at this pointBrowse repository at this point
2. Commits on Oct 4, 2026

   • fix(server): drop the XDP loader's capabilities and bound the event log

     Show description for eb54fd0
     fengyily

     committed
     eb54fd0View commit details

     Copy full SHA for eb54fd0

     View code at this pointBrowse repository at this point
3. Commits on Sep 30, 2026

   • fix(server): refuse an XDP whitelist that reaches the kernel empty

     Show description for 19a4c28
     fengyily

     committed
     19a4c28View commit details

     Copy full SHA for 19a4c28

     View code at this pointBrowse repository at this point
4. Commits on Sep 29, 2026

   • fix(server): make the XDP ingress filter opt-in and configured

     Show description for f7ed21a
     fengyily

     committed
     f7ed21aView commit details

     Copy full SHA for f7ed21a

     View code at this pointBrowse repository at this point

   • fix(ci): whitelist the relay private address in the server XDP filter

     Show description for 339aa02
     fengyily

     committed
     339aa02View commit details

     Copy full SHA for 339aa02

     View code at this pointBrowse repository at this point

   • fix(ci): resolve the relay whitelist address from DOMAIN_RELAY

     Show description for 6bff2ad
     fengyily

     committed
     6bff2adView commit details

     Copy full SHA for 6bff2ad

     View code at this pointBrowse repository at this point

   • feat(server): filter nhp-server ingress traffic with eBPF/XDP

     Show description for 5198df0
     fengyily

     committed
     5198df0View commit details

     Copy full SHA for 5198df0

     View code at this pointBrowse repository at this point
5. Commits on Sep 28, 2026

   • Bind non-TCP knock admission to the knock, and stop RST from cutting flows

     Show description for f3bd7c2
     fengyily

     committed
     f3bd7c2View commit details

     Copy full SHA for f3bd7c2

     View code at this pointBrowse repository at this point

   • Keep the AC's own channel to the nhp-server answerable

     Show description for 80e30cb
     fengyily

     committed
     80e30cbView commit details

     Copy full SHA for 80e30cb

     View code at this pointBrowse repository at this point

   • Close the UDP egress hole and stop cutting established sessions

     Show description for 19bbbbd
     fengyily

     committed
     19bbbbdView commit details

     Copy full SHA for 19bbbbd

     View code at this pointBrowse repository at this point
6. Commits on Sep 24, 2026

   • Describe the kernel path accurately in the AC config template

     fengyily

     committed
     479840dView commit details

     Copy full SHA for 479840d

     View code at this pointBrowse repository at this point
7. Commits on Sep 23, 2026

   • Verify the AC deploy against the daemon's own log and shrink its caps

     Show description for e5df4b2
     fengyily

     committed
     e5df4b2View commit details

     Copy full SHA for e5df4b2

     View code at this pointBrowse repository at this point

   • Verify the legacy flush and stop letting IPv6 break the AC

     Show description for a2d84cf
     fengyily

     committed
     a2d84cfView commit details

     Copy full SHA for a2d84cf

     View code at this pointBrowse repository at this point

   • Close the fail-open windows in the AC backstop rollback path

     Show description for eeeb7af
     fengyily

     committed
     eeeb7afView commit details

     Copy full SHA for eeeb7af

     View code at this pointBrowse repository at this point
8. Commits on Sep 22, 2026

   • Make the eBPF AC cutover fail closed and mode-driven

     Show description for db91179
     fengyily

     committed
     db91179View commit details

     Copy full SHA for db91179

     View code at this pointBrowse repository at this point
9. Commits on Sep 21, 2026

   • Switch demo AC access control from iptables to eBPF/XDP

     Show description for 1097365
     fengyily

     committed
     1097365View commit details

     Copy full SHA for 1097365

     View code at this pointBrowse repository at this point
10. Commits on Sep 14, 2026

    • feat(demo): close nhp-server HTTP/HTTPS surface and demologin access

      Show description for 0dfdbeb
      

      fengyily

      and

      claude

      committed
      0dfdbebView commit details

      Copy full SHA for 0dfdbeb

      View code at this pointBrowse repository at this point
11. Commits on Sep 12, 2026

    • Merge branch 'main' into feat/audit-ledger

      Show description for 64f4540
      Gerijacki

      committed
      64f4540View commit details

      Copy full SHA for 64f4540

      View code at this pointBrowse repository at this point
12. Commits on Sep 11, 2026

    • fix(keystore): UpdateTomlConfig CRLF/duplicate-key bug; keyMu race; docs

      Show description for e40133e
      Gerijacki

      committed
      e40133eView commit details

      Copy full SHA for e40133e

      View code at this pointBrowse repository at this point
13. Commits on Sep 7, 2026

    • keystore: version check before passphrase, deviceKeyLen symmetry, no-match guard

      Show description for ed3ed95
      Gerijacki

      committed
      ed3ed95View commit details

      Copy full SHA for ed3ed95

      View code at this pointBrowse repository at this point

    • audit: opt-in segment deletion, race-free async start, doc/CRLF fixes

      Show description for b65d31f
      Gerijacki

      committed
      b65d31fView commit details

      Copy full SHA for b65d31f

      View code at this pointBrowse repository at this point

    • audit: bound async memory by backpressure not dropping; retention cap; verify-missing error

      Show description for 97a42d0
      Gerijacki

      committed
      97a42d0View commit details

      Copy full SHA for 97a42d0

      View code at this pointBrowse repository at this point

    • audit: verify on-disk bytes, fail closed before listeners, O(1) open, async writer, segment rotation

      Show description for e255677
      Gerijacki

      committed
      e255677View commit details

      Copy full SHA for e255677

      View code at this pointBrowse repository at this point

    • Merge remote-tracking branch 'upstream/main' into feat/audit-ledger

      Show description for 6d83b06
      Gerijacki

      committed
      6d83b06View commit details

      Copy full SHA for 6d83b06

      View code at this pointBrowse repository at this point

    • chore(demo): remove nhp-server cluster 2 from deploy demo pipeline

      Show description for cec9659
      fengyily

      committed
      cec9659View commit details

      Copy full SHA for cec9659

      View code at this pointBrowse repository at this point

    • Merge branch 'main' into feat/audit-ledger

      fengyily

      authored
      9688fcaView commit details

      Copy full SHA for 9688fca

      View code at this pointBrowse repository at this point
14. Commits on Sep 4, 2026

    • fix(demoapp): tighten secret handling, non-root container, rate limiter GC, OAuth merge

      Show description for ace43df
      fengyily

      committed
      ace43dfView commit details

      Copy full SHA for ace43df

      View code at this pointBrowse repository at this point
15. Commits on Sep 3, 2026

    • ops(demoapp): hold KeyEnvelopeKey + SessionKey out of nhp-demo-configs artifact

      Show description for 3ed7b76
      fengyily

      committed
      3ed7b76View commit details

      Copy full SHA for 3ed7b76

      View code at this pointBrowse repository at this point

    • ops(demoapp): source KeyEnvelopeKey + SessionKey from opennhp/demo

      Show description for 43cdbc7
      fengyily

      committed
      43cdbc7View commit details

      Copy full SHA for 43cdbc7

      View code at this pointBrowse repository at this point

    • fix(demoapp): make X-Real-IP trust explicit via TrustProxyHeaders

      Show description for 7fd365a
      fengyily

      committed
      7fd365aView commit details

      Copy full SHA for 7fd365a

      View code at this pointBrowse repository at this point
16. Commits on Sep 2, 2026

    • fix(demoapp): security review fixes — jose vuln, IdP username lockout, case-insensitive uniqueness, loopback bind, SPA type-check

      Show description for f43ffeb
      fengyily

      committed
      f43ffebView commit details

      Copy full SHA for f43ffeb

      View code at this pointBrowse repository at this point
17. Commits on Sep 1, 2026

    • fix(demoapp): keep OAuth secret out of artifact, honor deploy_binaries, Makefile decoupling, subject namespacing, rate limiting

      Show description for e9968e8
      fengyily

      committed
      e9968e8View commit details

      Copy full SHA for e9968e8

      View code at this pointBrowse repository at this point

    • fix(demoapp): session cookie Secure flag, OIDC panic, rebind guard, state invalidation, GH_OAUTH TOML hygiene

      Show description for bc425e2
      fengyily

      committed
      bc425e2View commit details

      Copy full SHA for bc425e2

      View code at this pointBrowse repository at this point
18. Commits on Aug 31, 2026

    • feat(demoapp): add GitHub OAuth login flow

      Show description for 6cdae66
      fengyily

      committed
      6cdae66View commit details

      Copy full SHA for 6cdae66

      View code at this pointBrowse repository at this point
19. Commits on Aug 28, 2026

    • feat(demoapp): deploy integrated demo app to demo.opennhp.org

      Show description for 622a1f9
      fengyily

      committed
      622a1f9View commit details

      Copy full SHA for 622a1f9

      View code at this pointBrowse repository at this point