kevinveenbirkenbachandClaude Opus 5.5 57d6ece9b0 feat(cdn): serve the CDN same-origin on every front-proxy vhost ...

Values an app renders once (env files, branding config, web manifests)
cannot follow the network a page is served on, so onion pages loaded
logos and icons from the clearnet CDN host (Mobilizon, Wazuh, Mini-QR in
run 40243434327). Like the object-store route from 40b178d9a4, every
front-proxy vhost now aliases the CDN directory under /_infinito/cdn/,
with nosniff and a sandboxing CSP so a mirrored HTML or SVG file cannot
script the app's origin. lookup('cdn') and lookup('design') add
relative_urls for consumers that want host-relative URLs; the absolute
urls stay for server-side users. The include lives outside the location
snippets, so test_vhost_cross_cutting_includes requires it of every
override, the compose synapse vhost included.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-28 03:29:40 +01:00

..

__init__.py

refactor(python): clear the open CodeQL code-quality alerts

2026-10-20 21:40:58 +02:00

test_active_alertmanager_channels.py

…

test_addon_env_flags.py

fix(addons): gate the playwright addon flag on enabled alone, not on required

2026-10-02 17:10:26 +02:00

test_alert_rule_roles.py

fix(code-scanning): resolve the alerts that describe real code

2026-10-06 09:18:00 +02:00

test_api.py

fix(api): let the SPOT merge survive a templar without the kwarg

2026-09-15 03:50:02 +02:00

test_application_gid.py

…

test_applications_current_play.py

…

test_applications.py

perf(applications): render the applications SPOT once per play instead of once per task

2026-09-02 23:55:32 +02:00

test_asset.py

fix(lookup): serve assets from the CDN sibling of the vhost's network

2026-10-15 16:35:09 +02:00

test_backup_volume.py

fix(svc-bkp-volume-2-local): exclude a volume by the name docker gives it

2026-10-18 23:08:45 +02:00

test_bounded_name.py

refactor(roles): let a role declare its entity name and drop the get_ prefix

2026-10-03 19:40:53 +02:00

test_browser_proxy_bypass.py

fix(test-e2e-playwright): bypass the Tor proxy for every clearnet host the node serves

2026-10-15 12:44:38 +02:00

test_ca_injected.py

fix(ca_injected): read an application's own TLS on its canonical domain

2026-10-25 08:44:25 +01:00

test_canonical_url.py

refactor(seaweedfs): split the object store from its browser consoles

2026-10-01 02:20:12 +02:00

test_cdn.py

feat(cdn): serve the CDN same-origin on every front-proxy vhost

2026-10-28 03:29:40 +01:00

test_cert.py

Merge branch 'feature/updater' into feature/store-i18n

2026-10-24 01:57:56 +02:00

test_command_path.py

…

test_compose_external_networks.py

…

test_compose_file_args.py

Merge branch 'main' into feature/store-i18n

2026-10-22 19:34:17 +02:00

test_compose_networks.py

refactor(vars): ask the deployment mode by name, not by string comparison

2026-09-26 02:51:58 +02:00

test_compose_only.py

…

test_compose_replicas.py

refactor(vars): ask the deployment mode by name, not by string comparison

2026-09-26 02:51:58 +02:00

test_compose_restart.py

refactor(vars): ask the deployment mode by name, not by string comparison

2026-09-26 02:51:58 +02:00

test_compose_volumes_realign.py

fix(code-scanning): resolve the alerts that describe real code

2026-10-06 09:18:00 +02:00

test_compose_volumes_render.py

fix(lookups): name file-backed extra secrets by content and hand plain types to PyYAML

2026-09-11 11:20:26 +02:00

test_compose_volumes.py

refactor(vars): ask the deployment mode by name, not by string comparison

2026-09-26 02:51:58 +02:00

test_config_lookup.py

…

test_container_address.py

refactor(vars): ask the deployment mode by name, not by string comparison

2026-09-26 02:51:58 +02:00

test_container_depends_on.py

…

test_container_deploy.py

refactor(vars): ask the deployment mode by name, not by string comparison

2026-09-26 02:51:58 +02:00

test_container_dns.py

Merge branch 'feature/network/multi-network-serving' into feature/store-i18n

2026-10-23 09:53:41 +02:00

test_container_extra_hosts.py

Merge branch 'main' into feature/store-i18n

2026-10-04 01:57:17 +02:00

test_container_healthcheck.py

…

test_container_hostname.py

fix(nextcloud): keep the sociallogin uid within 64 chars on onion deploys

2026-09-11 21:14:55 +02:00

test_container_image.py

…

test_container_networks.py

refactor(vars): ask the deployment mode by name, not by string comparison

2026-09-26 02:51:58 +02:00

test_container_ports.py

refactor(container_ports): express the remaining published ports through the lookup

2026-09-15 14:55:25 +02:00

test_container_service.py

…

test_container_url.py

feat(plugins): ask for a container-network origin instead of assembling one

2026-10-18 02:13:05 +02:00

test_container_volumes_render.py

fix(lookups): name file-backed extra secrets by content and hand plain types to PyYAML

2026-09-11 11:20:26 +02:00

test_container.py

…

test_cpus.py

refactor(roles): let a role declare its entity name and drop the get_ prefix

2026-10-03 19:40:53 +02:00

test_current_play_redirect_domains.py

Merge branch 'feature/updater' into feature/store-i18n

2026-10-25 08:31:09 +01:00

test_database_consumerless_volumes.py

fix(svc-bkp-volume-2-local): owe no dump for a provider nobody consumes

2026-09-22 17:12:13 +02:00

test_database.py

fix(merge): repair what the main merge left broken

2026-10-04 03:21:09 +02:00

test_depends_on.py

…

test_deployment.py

fix(mcp): keep a persistent host's providers through a partial deploy

2026-10-25 09:24:28 +01:00

test_docker_cards.py

feat(web-app-dashboard): let a role name the canonical domain its card opens

2026-10-25 21:01:06 +01:00

test_domain_lookup.py

…

test_email.py

Merge remote-tracking branch 'origin/main' into feature/network/multi-network-serving

2026-10-15 16:45:18 +02:00

test_engine_qdrant_key.py

fix(qdrant,flowise): authenticate the vector engine and prove what Flowise can reach

2026-08-29 00:49:58 +02:00

test_engine_redis_session_path.py

chore: regenerate role docs and apply autoformat after #881 and #873

2026-10-08 22:27:12 +02:00

test_fediwall_active.py

…

test_gpu.py

style: settle the formatter and ruff rewrites of this change set

2026-10-06 00:23:15 +02:00

test_group_roles.py

perf(deploy): keep the roles no host carries out of the stage loop

2026-09-23 23:17:37 +02:00

test_guide_role.py

fix(guide_role): resolve the variable fallback the same way

2026-09-28 11:32:26 +02:00

test_image.py

refactor(roles): let a role declare its entity name and drop the get_ prefix

2026-10-03 19:40:53 +02:00

test_landing_url.py

fix(playwright): reach other applications through lookup('landing_url')

2026-10-24 22:25:39 +02:00

test_local_mtime_qs.py

…

test_matrix_server_name.py

fix(web-app-matrix): give Matrix user ids one definition and the admin MDAD needs

2026-10-06 13:52:36 +02:00

test_mcp_client_bearer.py

fix(code-scanning): resolve the alerts that describe real code

2026-10-06 09:18:00 +02:00

test_mcp_client_login.py

fix(mcp): present the account's login in basic auth, not the users-dict key

2026-10-16 12:37:30 +02:00

test_mcp_credential.py

fix(code-scanning): resolve the alerts that describe real code

2026-10-06 09:18:00 +02:00

test_mcp_servers.py

Merge branch 'feature/updater' into feature/store-i18n

2026-10-25 09:32:11 +01:00

test_mesh_address.py

refactor: drop rationale and narration from tests/unit/python/plugins/lookup/test_mesh_address.py

2026-10-16 19:10:01 +02:00

test_mesh_ranges.py

refactor: drop rationale and narration from tests/unit/python/plugins/lookup/test_mesh_ranges.py

2026-10-16 19:10:01 +02:00

test_mxid.py

fix(web-app-matrix): give Matrix user ids one definition and the admin MDAD needs

2026-10-06 13:52:36 +02:00

test_native_metrics_apps.py

test(lint): let the legacy-path guard see the trees that still named the old layout

2026-09-30 21:27:40 +02:00

test_native_metrics_target.py

fix(prometheus): resolve the native-metrics scrape target per deployment mode

2026-10-08 08:57:13 +02:00

test_network_driver.py

fix(sys-svc-compose): probe provider networks by their exact name

2026-10-12 18:35:22 +02:00

test_network_handover.py

refactor(networks): decide a handover sibling in one lookup and proxy it as the canonical host

2026-10-18 15:19:57 +02:00

test_network_redirects.py

fix(lookup): fan a redirect out only to the networks its target is served in

2026-10-24 21:19:45 +02:00

test_network_served.py

style(tests): apply the formatter to the network_served tests

2026-10-16 21:40:19 +02:00

test_network_siblings.py

test(domains): read the primary domain from default.env in every test

2026-09-24 22:53:54 +02:00

test_network_url.py

feat(networks): look up a same-node URL in the network a vhost or consumer needs

2026-10-15 13:21:23 +02:00

test_network_urls.py

feat(networks): look up a same-node URL in the network a vhost or consumer needs

2026-10-15 13:21:23 +02:00

test_nfs_lookups.py

fix(storage): keep the NFS client off the ports the platform publishes

2026-10-20 19:38:01 +02:00

test_nginx.py

…

test_node_hosts.py

fix(svc-ai): create the node-local model directory on every swarm node

2026-09-29 16:46:19 +02:00

test_node_max_old_space_size.py

…

test_objstore_consumers.py

refactor(seaweedfs): split the object store from its browser consoles

2026-10-01 02:20:12 +02:00

test_objstore.py

fix(objstore): name the consumer when resolving its onion origin

2026-10-24 15:26:22 +02:00

test_path_absolute.py

…

test_playwright_workers.py

fix(playwright): size the worker count from free memory, not total

2026-09-09 13:48:25 +02:00

test_postgres_libraries.py

fix(svc-db-postgres): build on the official multi-arch postgres 18 image

2026-10-01 22:19:09 +02:00

test_prometheus_integration_active.py

…

test_proxy_excluded_hosts.py

fix(network): let every proxied role reach its object store directly

2026-10-09 17:12:24 +02:00

test_proxy_pass.py

refactor(vars): ask the deployment mode by name, not by string comparison

2026-09-26 02:51:58 +02:00

test_rbac_group_path.py

…

test_redirect_uris.py

fix(code-scanning): resolve the alerts that describe real code

2026-10-06 09:18:00 +02:00

test_resource.py

style(resource): apply autoformat to the lookup and its tests

2026-09-14 14:53:39 +02:00

test_role_templates_expanded.py

…

test_role_tests.py

…

test_roles_with_service.py

Merge branch 'feature/updater' into feature/store-i18n

2026-10-25 23:47:07 +01:00

test_scrape_target.py

…

test_service_extensions.py

…

test_service_memory_mb.py

fix(sidecars): cap an engine's sidecar at its provider's size

2026-10-07 01:30:01 +02:00

test_service_registry.py

…

test_service.py

…

test_shared_network_key.py

refactor(seaweedfs): split the object store from its browser consoles

2026-10-01 02:20:12 +02:00

test_smtp_host.py

Merge branch 'feature/network/multi-network-serving' into feature/store-i18n

2026-10-23 09:53:41 +02:00

test_sso_logout_url.py

refactor(sso): compute the app logout target once in the sso lookup

2026-09-11 13:06:19 +02:00

test_sso_oidc_plugin.py

fix(sso): read the OIDC gate's flags through the rendering config lookup

2026-09-15 11:52:15 +02:00

test_sso_proxy_consumers.py

…

test_sso_scope_domains.py

fix(sso): serve the console's onion hosts and keep one session across them

2026-10-01 04:32:38 +02:00

test_sso_whitelist_domains.py

test(sso): derive the whitelist test domain from default.env

2026-10-08 04:19:32 +02:00

test_sso.py

feat(web-app-keycloak): run one oauth2-proxy per network a gated application is served on

2026-10-15 15:57:38 +02:00

test_timeout.py

…

test_tls.py

fix(objstore): name the consumer when resolving its onion origin

2026-10-24 15:26:22 +02:00

test_tor_ports.py

style: apply make autoformat to the merged Stalwart and Tor files

2026-10-03 19:57:30 +02:00

test_tor_reachable.py

…

test_tor_socks_proxy.py

fix(tests): one import form, two missed modules

2026-09-03 17:19:48 +02:00

test_tor_socks.py

…

test_unit_name.py

refactor(unit_name): build unit names from SYS_SERVICE_VERSION_SUFFIX

2026-10-23 23:34:13 +02:00

test_users_non_reserved.py

…

test_users.py

Merge branch 'feature/network/multi-network-serving' into feature/store-i18n

2026-10-23 09:53:41 +02:00

test_version.py

fix(svc-bkp-volume-2-local): read the baudolo version from pyproject.toml

2026-10-18 21:44:40 +02:00

test_volume.py

…

test_webserver_resource.py

fix(webserver): resolve an application_id the play still holds unrendered

2026-09-28 11:20:39 +02:00