5 Commits

Author	SHA1	Message	Date
timothykim	514061936b	strip upstream X-Frame-Options from service proxies	2026-04-10 15:08:59 -04:00
timothykim	5e85de9130	fix deploy race condition and harden security ... - reorder app.sh to run cert before commit/push (fixes workflow failure on first run) - quote $SSH_ORIGINAL_COMMAND in authorized_keys to prevent command injection - add port validation in service.sh nginx command - pin host key in deploy-beszel.yml workflow - fix append vs overwrite for known_hosts in deploy-nginx.yml	2026-04-10 15:00:10 -04:00
timothykim	54d6c03bd1	add nginx and cert subcommands to service.sh	2026-04-07 20:59:58 -04:00
timothykim	d2b9d0bce9	fix idempotency in app.sh, service.sh and nginx reload in cert handler	2026-04-07 15:56:59 -04:00
timothykim	c87f76a78a	rename new-service.sh to service.sh with subcommands	2026-03-27 12:28:32 -04:00