Commit Graph

575 Commits

Author SHA1 Message Date
Domingo Dirutigliano
0dd538621d
integrated more tooltips 2026-07-24 13:47:31 +02:00
Domingo Dirutigliano
8a2212a898
Merge pull request #38 from Pwnzer0tt1/dev
Improve README documentation
2026-07-24 11:06:17 +02:00
Domingo Dirutigliano
728fcbdf2f
improved readme 2026-07-24 11:05:38 +02:00
Domingo Dirutigliano
6cc2b7d6bc
Merge pull request #37 from Pwnzer0tt1/dev
enforced security over import backup, minor changes
2026-07-23 18:45:26 +02:00
Domingo Dirutigliano
0943aeaa01
enforced security over import backup, minor changes 2026-07-23 18:38:22 +02:00
Domingo Dirutigliano
cc81d02d90
Merge pull request #36 from Pwnzer0tt1/dev
Dev
2026-07-23 16:53:32 +02:00
Domingo Dirutigliano
bd55a7bc9c
integrated and refactore docs + minor changes 2026-07-23 16:53:09 +02:00
Domingo Dirutigliano
f06c389161
Merge pull request #35 from Pwnzer0tt1/dev-tmp
Integrating edits on main to dev branch
2026-07-23 13:45:33 +02:00
Domingo Dirutigliano
d27831c9ec
Merge branch 'dev' into dev-tmp 2026-07-23 13:45:25 +02:00
Domingo Dirutigliano
7881da7128
Merge pull request #33 from Sogoss/feat/tls-support
Add transparent TLS proxying and certificate management for NFProxy and NFRegex
2026-07-23 13:43:16 +02:00
Domingo Dirutigliano
be7f46424a
Merge branch 'main' into feat/tls-support 2026-07-23 13:40:19 +02:00
Domingo Dirutigliano
c37d2b31e8
graphics and TLS feature total refactoring 2026-07-23 13:39:01 +02:00
Domingo Dirutigliano
1a1135ab6a
Merge pull request #34 from Sogoss/feat/http-history
Add HttpHistory support for pyfilters in HTTP requests
2026-07-22 15:11:37 +02:00
Domingo Dirutigliano
53656d531c
minor fixes and integrated test 2026-07-22 15:10:31 +02:00
Domingo Dirutigliano
4125eff93f
minor adjustments + network address based access control 2026-07-22 07:54:38 +02:00
Sogoss
9e4f93455b fix(nfproxy): prevent O(N²) memory growth from nested history snapshots
Objects archived in the history deques no longer carry their own
_history snapshot, breaking the recursive chain where each historical
entry held copies of all prior entries. The .history property on
archived objects now returns an empty HttpHistory([], []) instead.
2026-07-21 15:19:30 +02:00
Sogoss
c71ad7c199 fix(nfproxy): export HttpHistory in nfproxy and ensure list immutability in getters 2026-07-20 16:14:07 +02:00
Sogoss
dbc8b176b1 fix(nfproxy): fix HttpHistory parameter ordering and state immutability
- Fix parameter order sensitivity in HttpHistory._fetch_packet when history is first argument

- Delegate total_size and should_upgrade to _message instead of live _parser

- Sanitize FGEX_MAX_HISTORY_SIZE with max(0, int(val)) and dynamically sync deque maxlen
2026-07-20 16:03:43 +02:00
Sogoss
a94854d00e feat(nfproxy): add HttpHistory support for pyfilters in HTTP requests 2026-07-20 15:31:56 +02:00
Sogoss
75c54f0155 Add transparent TLS proxying and certificate management for NFProxy and NFRegex
- Add Nginx stream proxy module for transparent TLS termination in NFProxy and NFRegex
- Add backend routes and SQLite schema for certificate management (upload, view, delete)
- Implement DNAT nftables redirection rules for deterministic TLS ports
- Add frontend React components (TLSConfigModal, TLSServiceFields) for certificate configuration
- Update Dockerfile and docker-entrypoint.sh to support Nginx stream module and sysctl forwarding
2026-07-20 12:25:30 +02:00
Domingo Dirutigliano
bd10f9e8b8
Merge pull request #32 from Pwnzer0tt1/dev
auto-recognize version when using cloned firegex
2026-07-12 19:02:41 +02:00
Domingo Dirutigliano
4f62a7c7c9
Merge branch 'dev' of github.com:Pwnzer0tt1/firegex into dev 2026-07-12 18:59:06 +02:00
Domingo Dirutigliano
935a6a1574
auto-recognize version when using cloned firegex 2026-07-12 18:58:57 +02:00
Domingo Dirutigliano
cf2cbfea80
auto-recognize version when using cloned firegex 2026-07-12 18:46:35 +02:00
Domingo Dirutigliano
729139852b
Update standalone mode description in README
Clarify the conditions for running Firegex in standalone mode.
2026-07-08 16:34:51 +02:00
Domingo Dirutigliano
24634ec60b
mantine update 2026-06-21 11:49:53 +02:00
Domingo Dirutigliano
721f94c52b
Merge branch 'main' of github.com:Pwnzer0tt1/firegex 2026-06-18 21:00:41 +02:00
Domingo Dirutigliano
5bf000fdce
invalid request check on nfqueue updated 2026-06-18 21:00:30 +02:00
Domingo Dirutigliano
8df9fbf359
Update Netfilter Proxy description in README
Removed 'EXPERIMENTAL' label from Netfilter Proxy description in README.
2026-06-07 15:49:57 +02:00
Domingo Dirutigliano
16d0bfd169
CRITICAL: fix possible path traversal 2026-04-10 14:52:22 +02:00
Domingo Dirutigliano
16f96aa6f6
using brotli 1.2 from pypi, fixed tests to py 3.14, removed from experimental pyproxy 2025-11-11 23:30:48 +01:00
Domingo Dirutigliano
49c6c14fe5
upgrade to py3.14 and fedora 43 2025-10-13 15:38:38 +02:00
Domingo Dirutigliano
b352790f64
Merge pull request #31 from Minei3oat/restart-fixes
Fix caching problems on fresh restart
2025-10-03 08:17:48 +02:00
Minei3oat
f3024cc9a8 Invalidate cache on login 2025-10-03 00:58:55 +02:00
Minei3oat
753ed241b6 Clear password fields after submit 2025-10-03 00:58:34 +02:00
Domingo Dirutigliano
676e1dcb77
Merge pull request #30 from Minei3oat/socketio
Reconnect to websocket on access_token change
2025-10-02 23:13:24 +02:00
Minei3oat
0c5a681f5b Reconnect to websocket on access_token change 2025-10-02 23:10:26 +02:00
Domingo Dirutigliano
c726855b1c
Merge pull request #29 from Pwnzer0tt1/unix_sock_bind
additional fixes to socket binding
2025-10-01 15:40:02 +02:00
Domingo Dirutigliano
bb4addf590
Merge pull request #28 from Minei3oat/socket
Allow binding to UNIX domain sockets
2025-10-01 15:39:40 +02:00
Domingo Dirutigliano
f554ac558a
additional fixes to socket binding 2025-10-01 15:37:20 +02:00
Minei3oat
88f4f54b55 Allow binding to UNIX domain socket
UNIX domain sockets are the recommended configuration for proxying with Nginx:
https://uvicorn.dev/deployment/#running-behind-nginx
2025-10-01 01:49:28 +02:00
Domingo Dirutigliano
0492f16cea
using empty string instead of None to bind dualstack server 2025-09-29 16:39:27 +02:00
Domingo Dirutigliano
2362eb8045
password hashing customized and also set already hashed by run.py 2025-09-29 14:33:12 +02:00
Domingo Dirutigliano
aeb97062e2
bind firegex also on ipv6 by default 2025-09-29 13:15:09 +02:00
Domingo Dirutigliano
402be8c021
new crypto system for passwords, removed bcrypt 2025-09-29 12:53:05 +02:00
Domingo Dirutigliano
2798cd4f2a
Merge pull request #25 from Minei3oat/bcrypt
Restrict bcrypt version to <5
2025-09-29 00:03:27 +02:00
Domingo Dirutigliano
5343735129
Merge pull request #27 from Minei3oat/image-size
Reduce docker image size by 35%
2025-09-28 23:48:57 +02:00
Minei3oat
2f96739908 Use COPY instead of ADD
> Use ADD only when you need the additional capabilities it offers, but be mindful of potential security implications.
https://www.docker.com/blog/docker-best-practices-understanding-the-differences-between-add-and-copy-instructions-in-dockerfiles/
2025-09-28 22:28:46 +02:00
Minei3oat
ebe62acd8d Cleanup duplicate installs 2025-09-28 22:25:26 +02:00
Minei3oat
8002680642 Reduce docker image size by 35%
Since docker caches each instruction as a layer, we have to clean cached packages at the end of each step for minimal image size.
2025-09-28 22:24:46 +02:00