Repository navigation

HTTPS proxy for app services - #440

Merged

krokicki merged 24 commits into

mainfrom

app-service-https-proxy

Sep 4, 2026

Merged

HTTPS proxy for app services#440
krokicki merged 24 commits into
mainfrom
app-service-https-proxy

Commits on Aug 31, 2026
- docs: spec an HTTPS proxy for app services
  
  krokicki
  and
  claude
  committed
  85ed1fe
- docs: add implementation plan for the app service HTTPS proxy
  
  krokicki
  and
  claude
  committed
  d203bd6
- docs: name the service proxy zone and drop the delegation requirement
  
  krokicki
  and
  claude
  committed
  76d8111
- feat: cache a service job's published URL on its row
  krokicki
  committed
  0301ab7
- feat: add URL helpers for the app service HTTPS proxy
  
  krokicki
  and
  claude
  committed
  d546b1f
- docs: fix a hostname the zone rename missed in the plan
  krokicki
  committed
  fe2caab
- feat: add /api/apps/resolve for the service HTTPS proxy
  krokicki
  committed
  b2f5083
- feat: publish service jobs at their HTTPS proxy URL
  krokicki
  committed
  4d40658
- docs: document the app service HTTPS proxy setup
  krokicki
  committed
  2a0235d
- docs: link the service proxy guide
  krokicki
  committed
  8bdc104
- fix: bound job-id digits and constrain the service proxy upstream
  krokicki
  committed
  d9c4171
- docs: explain internal;, correct SSRF-gate claims, add residual risks
  krokicki
  committed
  25dc33f
- fix: match the proxy upstream allowlist on whole DNS labels
  krokicki
  committed
  802a48d
- fix: narrow the upstream check to hosts only the web tier can reach
  krokicki
  committed
  c661f1b
- docs: add service_proxy_upstream_suffix to the config template
  krokicki
  committed
  ed4ca93
- feat: rename the upstream zone and add a CIDR allowlist beside it
  krokicki
  committed
  7f4b8a4
- perf: cache proxy resolutions and report them in aggregate
  krokicki
  committed
  e523362
- test: dispose the service-proxy test engines before the temp dir goes
  krokicki
  committed
  8154b28
Commits on Sep 2, 2026
- chore: create alpha release 3.2.0-a0 for testing on dev
  allison-truhlar
  committed
  3320db1
- chore: update twine version in release env
  allison-truhlar
  committed
  549b79a
- chore: bump to version 3.2.0a1 for test release on dev
  allison-truhlar
  committed
  8eb85a2
- Merge branch 'main' into app-service-https-proxy
  
  krokicki
  and
  claude
  committed
  af58ece
Commits on Sep 4, 2026
- feat: sign service proxy hostnames so they can't be enumerated
  
  krokicki
  and
  claude
  committed
  50c3166
- feat: explain a stopped service instead of serving nginx's 403
  
  krokicki
  and
  claude
  committed
  e64ceaa

Commits

Commits on Aug 31, 2026

Commits on Sep 2, 2026

Commits on Sep 4, 2026