78 Commits

Author SHA1 Message Date
dependabot[bot]
235c76456f ci(deps): bump actions/upload-artifact from 4 to 5 (#3)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-06 04:12:19 +08:00
rE-Bo0t.bx1
ee08c4d66f Fix missing newline in dependabot.yml 2025-11-06 04:10:23 +08:00
rE-Bo0t.bx1
b283f9680e Fix workflow linting issues
- Skip workflow file validation in validate.yml (complex format)
- Fix all line length issues in both workflows
- Remove trailing spaces
- Add newline at end of files
- Shorten long labels to fit 80 character limit
2025-11-06 04:07:52 +08:00
rE-Bo0t.bx1
1324722165 fix: correct formatting in release workflow conditions and update image description 2025-11-06 04:01:49 +08:00
rE-Bo0t.bx1
4db06050f5 fix: refactor tag generation to use an array for better maintainability 2025-11-06 03:58:04 +08:00
rE-Bo0t.bx1
792a0ee025 fix: format tag definitions for better readability in release workflow 2025-11-06 03:54:59 +08:00
rE-Bo0t.bx1
f7509eab7a Release v1.0.3
- Fix workflow timeout issues
- Add workflow_run trigger for automatic releases
- Improve line length compliance
- Add support for validated builds
- Update Docker image tagging strategy
2025-11-06 03:48:49 +08:00
rE-Bo0t.bx1
300a26bdd6 Release v1.0.3
- Fix workflow timeout issues
- Add workflow_run trigger for automatic releases
- Improve line length compliance
- Add support for validated builds
- Update Docker image tagging strategy
2025-11-06 03:45:38 +08:00
rE-Bo0t.bx1
13b0f1d8c4 fix: ensure workflows continue on error and validate all steps 2025-11-06 03:23:40 +08:00
rE-Bo0t.bx1
35550552f9 fix: remove trailing spaces and add newlines in workflows 2025-11-06 03:00:15 +08:00
rE-Bo0t.bx1
be9312faaa feat: smart diagnostics + Docker Hub publishing 2025-11-06 02:52:29 +08:00
rE-Bo0t.bx1
05a08e1366 feat: smart diagnostics + Docker Hub publishing 2025-11-06 02:06:46 +08:00
rE-Bo0t.bx1
b8a495523d fix: clean up cron comment and improve formatting in release workflows 2025-11-06 01:45:09 +08:00
rE-Bo0t.bx1
66bc720ff2 chore(release): v1.0.3 – unified workflows, dual registry publishing, and lint compliance 2025-11-06 01:36:54 +08:00
rE-Bo0t.bx1
297d4fec87 ci(release): rebuild unified release workflow for GHCR + Docker Hub sync
- Consolidated CI into one efficient pipeline
- Unified tag handling for GHCR and Docker Hub
- Added weekly + manual release triggers
- Hardened dos2unix normalization pre-build
- Cleaner YAML and quieter logs
2025-11-06 01:06:45 +08:00
rE-Bo0t.bx1
019139056e fix: rebuild release.yml + Dockerfile normalization for v1.0.3 2025-11-06 00:44:15 +08:00
rE-Bo0t.bx1
64cfc84a8d feat: smart diagnostics and dual registry publishing
- Add smart network diagnostics triggered by bandwidth self-test
- Replace fixed 2-minute delay with log monitoring
- Diagnostics now run when Tor completes self-test (no false failures)
- Add Docker Hub publishing alongside GHCR
- Update release workflow for dual registry support
- Multi-arch builds (amd64, arm64) to both registries

Fixes startup errors: 'Consensus: failed', 'Ports: closed'
2025-11-06 00:11:07 +08:00
rE-Bo0t.bx1
25fd7a09d7 feat(security): enforce localhost-only binding for internal services (v1.0.2)
BREAKING CHANGE: Internal services now bind to 127.0.0.1 by default

This release enforces strict port security with a two-tier model:
- Public: 9001 (ORPort), 9030 (DirPort)
- Internal: 9035+ (metrics, health, dashboard) - localhost-only

Changes:
- CHANGELOG.md: Updated version entries, aligned to v1.0.2
- README.md: Updated version references and deployment examples
- SECURITY.md: Enhanced with network architecture and port policy
- relay-status.sh: Added port security validation (v1.0.2)
- integration-check.sh: Added port/version validation phases (v1.0.2)

Security Improvements:
- Prevents unauthorized external access to internal endpoints
- Adds reverse proxy, SSH tunnel, and VPN access guidance
- Includes comprehensive migration guide for existing deployments
- Adds automated security validation in diagnostic tools

Migration Required:
If accessing metrics/health externally, use reverse proxy with auth,
SSH tunneling, or VPN. See SECURITY.md for details.

Version: 1.0.2
2025-11-05 21:28:55 +08:00
rE-Bo0t.bx1
883f6e5ef4 fix: quote YAML values with colons in validate.yml 2025-11-05 21:28:54 +08:00
rE-Bo0t.bx1
95165aae95 feat: v1.1 repository restructuring
Reorganize into professional directory structure:
- Add 6 comprehensive documentation files
- Update Dependabot configuration
- Update README for better navigation
- Create docs/, templates/, tools/, .github/ structure

See RESTRUCTURING-SUMMARY.md for complete details.

BREAKING CHANGES: None - fully backward compatible
2025-11-05 21:28:10 +08:00
rE-Bo0t.bx1
6304ce97b7 fix(ci): remove duplicate name key from workflow 2025-11-01 08:17:48 +09:00
rE-Bo0t.bx1
8057249f58 📚 docs(readme): clean up badges and workflow names for better visuals 2025-11-01 08:14:29 +09:00
dependabot[bot]
8763af89f8 chore(deps)(deps): bump actions/checkout from 4 to 5 (#2)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-01 07:49:49 +09:00
rE-Bo0t.bx1
34e44f5732 chore(deps): trigger Dependabot recheck 2025-11-01 07:48:30 +09:00
rE-Bo0t.bx1
dd6b4e5cd0 fix(ci): downgrade actions/checkout from v5 to v4 for compatibility 2025-11-01 07:42:46 +09:00
rE-Bo0t.bx1
9f967de239 🐋 refactor: replace onion.container with Dockerfile for improved build process 2025-11-01 07:33:03 +09:00
dependabot[bot]
127d3acda2 chore(deps)(deps): bump actions/checkout from 4 to 5 (#1)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-01 07:18:13 +09:00
rE-Bo0t.bx1
b06d2eb68f 🎉 Initial release - Tor Guard Relay v1.0 2025-11-01 07:15:32 +09:00