gti and Claude Opus 5.5
91a2dda969
feat: publish the Hub through a reverse proxy on another host
...
GTI terminates TLS in its Nginx Proxy Manager (10.0.10.100), not on the
Hub host, so the Hub must be reachable on the LAN — by the proxy only.
- docker-compose.prod.yml passes FORWARDED_ALLOW_IPS (uvicorn then trusts
X-Forwarded-For/-Proto from the proxy only: real client IPs in audit and
session records, https scheme) and WEB_COOKIE_SECURE. Defaults keep the
previous behaviour.
- restrict_hub_port.sh + gti-fiscal-hub-port.service: Docker-published
ports bypass UFW, so the source restriction lives in DOCKER-USER,
matched on the conntrack original destination with --ctdir ORIGINAL,
and is re-applied whenever docker.service starts (the chain is not
persisted across reboots).
- *.service forced to LF like *.sh; tests cover both.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-09-23 07:46:11 -03:00
..
2026-09-21 16:30:27 -03:00
2026-09-21 15:51:47 -03:00
2026-09-22 23:04:53 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:52:17 -03:00
2026-09-21 15:52:17 -03:00
2026-09-23 07:23:13 -03:00
2026-09-21 15:52:17 -03:00
2026-09-21 15:52:17 -03:00
2026-09-21 16:30:27 -03:00
2026-09-21 15:52:17 -03:00
2026-09-22 13:08:38 -03:00
2026-09-22 13:08:38 -03:00
2026-09-22 14:51:54 -03:00
2026-09-22 14:51:54 -03:00
2026-09-22 14:51:54 -03:00
2026-09-22 14:51:54 -03:00
2026-09-22 13:08:38 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 16:46:59 -03:00
2026-09-22 23:04:53 -03:00
2026-09-22 20:49:04 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-22 13:08:38 -03:00
2026-09-21 15:51:47 -03:00
2026-09-22 13:08:38 -03:00
2026-09-22 14:34:15 -03:00
2026-09-22 14:34:15 -03:00
2026-09-22 14:34:15 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-22 13:08:38 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:52:17 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-22 13:08:38 -03:00
2026-09-21 16:30:27 -03:00
2026-09-21 16:46:59 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 16:46:59 -03:00
2026-09-22 13:08:38 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 16:30:27 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:52:17 -03:00
2026-09-21 15:52:17 -03:00
2026-09-21 16:30:27 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-23 07:46:11 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 16:46:59 -03:00
2026-09-21 16:46:59 -03:00
2026-09-22 12:17:05 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:52:17 -03:00
2026-09-23 07:23:13 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00
2026-09-21 15:51:47 -03:00