3 Commits

Include renames

Author	SHA1	Message	Date
isaaccladandClaude Opus 4.8	2a1228b40e	Jail the control-panel terminal to the customer's home (chroot) ... SECURITY: the browser terminal ran an unconfined login shell as the account's system user, so customers could browse the whole host (/var/www, other tenants, /etc). Run it inside a jailkit chroot instead: a vetted, sudo-scoped launcher (/usr/local/sbin/ladill-jailsh) enters a private mount namespace, bind-mounts ONLY that user's home into /home/jail, and chroots as the user. They can no longer see anything outside their own home. Provisioning committed in deployment/ (setup-terminal-jail.sh + ladill-jailsh) so it is reproducible. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-26 23:41:18 +00:00
isaaccladandClaude Opus 4.8	107013bd04	Hosting dev-access: resolve via central identity API (shadow mode) ... Consolidate the inline HostingAccountMember lookups (Overview/Search/Hosting Product/Afia controllers) into HostingAccessResolver, which can source hosting developer-access from the monolith's central /identity/hosting/developer-access (correlating cPanel usernames to local account ids). Shadow mode by default (HOSTING_CENTRAL_DEV_ACCESS=false): local hosting_account_members stays authoritative and divergence from central is logged; flip the flag to cut over. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-18 23:42:08 +00:00
isaaccladandCursor	e251a4cf60	Initial Ladill Hosting app with Gitea deploy pipeline. ... Shared web hosting extracted from the platform monolith, with CI deploy to /var/www/ladill-hosting matching Bird/Domains/Email. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-06 16:24:20 +00:00