Buriburizaemon/nezha_domains
1
0
Fork 0
mirror of https://github.com/Buriburizaem0n/nezha_domains.git synced 2026-09-19 17:50:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,959 Commits 1 Branch 2 Tags
99e19c551abffd899e4f26fc8d5db2da11dd2398
Commit Graph
23 Commits
Author SHA1 Message Date
naibaandcloudcode d4837dfc7a fix(security): reserve dashboard hosts from NAT and re-check DDNS profile ownership at worker time 
GHSA-x6fg-52vr-hj4w: NAT is a commonHandler any authenticated member can
create, and newHTTPandGRPCMux matches r.Host against NAT before dispatching
the dashboard/gRPC handlers, so a member could register the dashboard's own
host as a NAT Domain and hijack global routing. Add IsReservedDashboardHost
(InstallHost/ListenHost plus an operator-declared ReservedHosts list for
reverse-proxy deployments), reject reserved hosts on create/update, and drop
pre-planted records when building the startup cache.

GHSA-39g2-8x68-pmx8: bind-time CheckPermission let a member pre-bind a DDNS
profile ID that the victim would only create later. GetDDNSProvidersFromProfiles
now re-validates ownership by server owner UID and skips foreign-owned
profiles (UserID==0 is treated as a migration artifact, not an admin grant).

Co-authored-by: cloudcode <cloudcode@users.noreply.github.com>
 2026-05-31 02:04:35 +00:00
UUBulb b3377127a4 update ddns on server update (#1050) 2025-03-31 19:41:04 +08:00
UUBulb ea3739cf1c ddns: support provider hurricane electric (#1036) 2025-03-19 21:52:16 +08:00
UUBulb 49c68f0da4 ddns: retreive dns servers from context (#1034) 2025-03-17 23:11:40 +08:00
UUBulb ea068d4db1 refactor: simplify server & service manipulation (#993) 
* refactor: simplify server & service manipulation

* update

* fix

* update for nat, ddns & notification

* chore

* update cron

* update dependencies

* use of function iterators

* update default dns servers
 2025-02-21 23:08:12 +08:00
UUBulb dc0132c9aa feat: user roles (#852) 
* [WIP] feat: user roles

* update

* update

* admin handler

* update

* feat: user-specific connection secret

* simplify some logics

* cleanup

* update waf

* update user api error handling

* update waf api

* fix codeql

* update waf table

* fix several problems

* add pagination for waf api

* update permission checks

* switch to runtime check

* 1

* cover?

* some changes
 2024-12-22 00:05:41 +08:00
UUBulb 3e3994d3c9 chore: use cmp (#568) 2024-12-08 20:21:35 +08:00
UUBulb 4ddad9ea00 fix service api (#556) 
* fix service api

* update ServiceResponseItem

* fix: ddns lock
 2024-12-05 21:00:02 +08:00
naiba a7e4fe0909 rename repo 2024-11-28 19:38:54 +08:00
UUBulb e4c6502363 optimize sorting, fix a bug (#15) 2024-11-23 01:13:39 +08:00
uubulb 1c308929ee merge upstream, improve geoip pkg 2024-10-31 03:34:25 +08:00
UUBulb 2fb83da047 ddns: replace tencentcloud implemention (#462) 2024-10-29 21:39:45 +08:00
UUBulb 8bfe70d519 add cron, nat api & refactor alert rule (#459) 
* add cron api & refactor alert rule

* add nat api

* fix swagger

* remove unnecessary steps
 2024-10-26 23:57:47 +08:00
UUBulb 8b24a30bee fix list apis (#453) 2024-10-24 10:21:59 +08:00
UUBulb 05b716d80f ddns: add listProviders api (#446) 
* ddns: add listProviders api

* fix swagger
 2024-10-22 00:04:17 +08:00
UUBulb ec83ff0617 dev: add ddns list api (#445) 2024-10-21 16:22:30 +08:00
UUBulb 643c6dd3a1 ddns: remove ipv6 nameservers, support custom nameservers (#439) 2024-10-18 22:06:01 +08:00
UUBulbandnap0o bf9c6d669a ddns: store configuation in database (#435) 
* ddns: store configuation in database

Co-authored-by: nap0o <144927971+nap0o@users.noreply.github.com>

* feat: split domain with soa lookup

* switch to libdns interface

* ddns: add unit test

* ddns: skip TestSplitDomainSOA on ci

network is not steady

* fix error handling

* fix error handling

---------

Co-authored-by: nap0o <144927971+nap0o@users.noreply.github.com>
 2024-10-17 21:03:03 +08:00
UUBulb 911bce71ff refactor: ddns (#414) 
* refactor ddns

* update webhook
 2024-08-24 11:11:06 +08:00
UUBulb a80b40c2aa ddns: improve performance (#385) 2024-07-07 10:19:58 +08:00
UUBulb 3e51bce224 Add DDNS Profiles, use publicsuffixlist domain parser (#350) 
* Add DDNS Profiles, use publicsuffixlist domain parser

* Add Tencent Cloud DNS Provider

* Restore validate DDNS provider function

* chore: fmt & upgrade dependencies
 2024-04-27 13:36:36 +08:00
Darc Z 357155cb90 Fix DDNS bugs and split up ddns module (#326) 
* fix: webhook retry logic
fix: adjust record type based on ipv4 ipv6
refract: move ddns providers to a new module

* refract: move ddns module to pkg/
 2024-02-26 11:49:28 +08:00
Darc Z f9c0bb2240 Add DDNS support (#324) 
* feat: add ddns updater framework

Note: no functionality implemented yet

* feat: add webhook ddns provider

* feat: update dashboard template

* fix: check nil and cron task string

* fix: webhook string formated with unexcepted param

* fix: webhook header split error

* feat: cloudflare ddns provider

* refract: move ddns update trigger into ReportSystemInfo

* lang: update other languages text

* fix: clear codes and logics

* fix: move update ddns to goroutine to avoid blocking

* fix: clear unused codes

* fix: update timestamp to prevent cache
 2024-02-24 21:10:27 +08:00