9 Commits

Author SHA1 Message Date
datadunia f4f8be12df refactor: .env as single config, remove nexusguard.conf.example, update docker-compose 2026-05-31 05:38:13 +07:00
datadunia 549ee80c5d chore: docker-compose, setup.sh, nexusguard.conf.example, update submodule 2026-05-31 04:42:52 +07:00
datadunia f7a5431db8 chore: update submodules + docker-compose fixes + new plan docs
NexusGuard CI / server-core-test (push) Failing after 37s
NexusGuard CI / device-agent-test (push) Failing after 32s
NexusGuard CI / dashboard-ui-build (push) Failing after 35s
2026-05-28 14:43:50 +07:00
datadunia 8c6206d2e5 nft ip change
NexusGuard CI / server-core-test (push) Failing after 38s
NexusGuard CI / device-agent-test (push) Failing after 32s
NexusGuard CI / dashboard-ui-build (push) Failing after 29s
2026-05-28 14:21:33 +07:00
datadunia 31707cfaef feat: server-core → network_mode host for direct WireGuard routing
NexusGuard CI / server-core-test (push) Failing after 27s
NexusGuard CI / device-agent-test (push) Failing after 28s
NexusGuard CI / dashboard-ui-build (push) Failing after 41s
- docker-compose.yml: server-core uses host network (no bridge isolation)
- docker-compose.yml: postgres/redis expose ports on 127.0.0.1 only
- docker-compose.dev.yml: also uses host network
- WireGuard now runs on host network stack (wg show works on host)
- nftables rules apply directly to host (proper peer isolation)
2026-05-28 13:31:24 +07:00
datadunia f9ab85e001 feat(devops): make web port configurable via environment variables 2026-05-16 02:56:35 +07:00
datadunia 7ba35c517b chore: remove obsolete version from compose files 2026-05-16 02:35:40 +07:00
datadunia 503f4b8c63 feat(devops): unify frontend docker build and root env injection 2026-05-16 02:32:52 +07:00
datadunia 9fcb932d0f feat(devops): complete phase 3 infrastructure 2026-05-15 05:34:55 +07:00