2026-03-29 - 2026-09-29
Overview
8 Pull requests merged by 1 user
Merged
#11 fix(haproxy): set X-CLIENT-IP instead of adding it
Merged
#9 fix(domain-removal): stop deleting certificates other live sites are served from
Merged
#8 fix(ip-blocking): the runtime map fast path has never once run
Merged
#7 fix(security-stats): stop reporting counters the stick tables never stored
Merged
#6 fix(haproxy): silence the ACL pattern warning on wp_admin_asset
Merged
#5 Add hap_backend_websocket.tpl long-lived/websocket backend template
Merged
#4 docker: set image.source label to GitHub mirror for ghcr.io linking
Merged
#3 ci: mirror image pushes to ghcr.io/shadowdao
1 Issue closed from 1 user
Closed
#10 Client-supplied IP headers are trusted at the edge: X-Real-IP / CF-Connecting-IP / X-Forwarded-For are not stripped from untrusted peers
1 Issue created by 0 users
Opened
#10 Client-supplied IP headers are trusted at the edge: X-Real-IP / CF-Connecting-IP / X-Forwarded-For are not stripped from untrusted peers