9 Commits

Include renames

Author	SHA1	Message	Date
isaaccladandCursor	b7f320ca30	Hide fulfilled pending-setup orders from the customer hosting list. ... Sales Centre left Active CustomerHostingOrder rows with pending-setup.local alongside real HostingAccounts, so customers saw two hostings. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-13 17:10:49 +00:00
isaaccladandCursor	40d3dc0fbe	Provision PowerDNS zones immediately on domain link and add ensure-zone command. ... Async-only zone jobs left Ladill NS returning REFUSED for new domains, which surfaces as Let's Encrypt SERVFAIL during SSL issuance. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-13 16:56:28 +00:00
isaaccladandCursor	136cf8b719	Fix subdomain DNS messaging for Ladill nameservers and retire pending-setup primaries. ... Treat ns_auto domains as managed DNS, publish subdomain A records via PowerDNS without failing the UX when the local DNS registry is missing, and promote real linked domains over pending-setup.local placeholders. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-13 16:47:50 +00:00
isaaccladandClaude Opus 4.8	18d1e735d8	Jail the remote (SSH) terminal path too, not just local ... Accounts whose node has an ssh_private_key take the remote branch, which still launched an unjailed 'runuser' shell — leaving the breach open. Route it through the same jailkit launcher (no sudo; provider connects as root). Now every terminal session is chrooted to the customer's own home. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-26 23:55:22 +00:00
isaaccladandClaude Opus 4.8	2a1228b40e	Jail the control-panel terminal to the customer's home (chroot) ... SECURITY: the browser terminal ran an unconfined login shell as the account's system user, so customers could browse the whole host (/var/www, other tenants, /etc). Run it inside a jailkit chroot instead: a vetted, sudo-scoped launcher (/usr/local/sbin/ladill-jailsh) enters a private mount namespace, bind-mounts ONLY that user's home into /home/jail, and chroots as the user. They can no longer see anything outside their own home. Provisioning committed in deployment/ (setup-terminal-jail.sh + ladill-jailsh) so it is reproducible. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-26 23:41:18 +00:00
isaaccladandCursor	e3fd235139	Unify SSO and surface legacy ResellerClub hosting orders on the dashboard. ... Add silent OAuth and session keepalive, and show imported RC orders alongside native hosting accounts. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-07 06:33:16 +00:00
isaaccladandCursor	d532f5b206	Fix legacy RC hosting orders not appearing after app extraction. ... Import RC service orders in hosting:import, map platform_id on legacy models, and wire legacy order manage links to hosting.legacy.show. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-06 20:31:29 +00:00
isaaccladandCursor	e39a47fa1f	Land on account overview and import hosted sites. ... Route launcher and home hub entry to the account overview instead of the control panel, label the sidebar app launcher, and extend hosting:import to sync hosted_sites with platform_id matching for existing accounts. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-06 17:13:46 +00:00
isaaccladandCursor	e251a4cf60	Initial Ladill Hosting app with Gitea deploy pipeline. ... Shared web hosting extracted from the platform monolith, with CI deploy to /var/www/ladill-hosting matching Bird/Domains/Email. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-06 16:24:20 +00:00