Juan DenisandClaude Fable 5 4c76d43cb7 feat(security): cloud-metadata egress guard for app containers ...

Default-on (opt-out) DOCKER-USER drop rule for 169.254.169.254 with an
nftables fallback, toggleable from Security > Firewall. Kills the
SSRF-to-cloud-IAM credential-theft class on cloud VPSes.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-03 14:23:11 -04:00

..

api

feat(security): cloud-metadata egress guard for app containers

2026-07-03 14:23:11 -04:00

data

feat(extensions): Phase 2 backend — remote registry, checksum install, updates

2026-07-01 21:41:50 -04:00

jobs

feat(extensions): daily scheduled update check + admin notification (#50)

2026-07-02 02:15:03 -04:00

middleware

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

models

feat(servers): store the agent's self-reported footprint dirs

2026-07-02 22:36:34 -04:00

notifications

feat(extensions): daily scheduled update check + admin notification (#50)

2026-07-02 02:15:03 -04:00

plugins

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

plugins_sdk

feat(extensions): per-plugin config store + Configure form (#49)

2026-07-02 02:09:39 -04:00

queue_bus

feat(telemetry): unified system event stream with correlation

2026-06-21 20:19:57 -04:00

services

feat(security): cloud-metadata egress guard for app containers

2026-07-03 14:23:11 -04:00

utils

feat(files): Stack quick link follows the real install dir

2026-07-02 22:19:14 -04:00

__init__.py

feat(extensions): Phase 5 — extract Cloudflare zone-ops into serverkit-cloudflare-ops

2026-07-02 01:04:03 -04:00

agent_gateway.py

feat(remote-access): NAT-traversing WireGuard tunnels to expose private services

2026-06-15 23:20:00 -04:00

paths.py

feat(wordpress): global plugin library for operator-owned plugins

2026-07-01 01:08:42 -04:00

sockets.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00