Codescribe fffa621797 security: default metrics server to loopback ...

Fixes unauthenticated metrics exposure by defaulting to 127.0.0.1 when
no host is provided. Logs a warning when bound to non-loopback addresses.

2026-08-24 15:14:59 +07:00

..

winres

all: include file information in Windows builds

2024-02-07 14:40:18 +07:00

ad_others.go

Removing Windows Server support

2026-04-30 19:19:18 +07:00

ad_windows_test.go

Including system metadata when posting to utility API

2026-04-30 19:19:19 +07:00

ad_windows.go

Including system metadata when posting to utility API

2026-04-30 19:19:19 +07:00

cgo.go

cmd/cli: support nocgo version for upgrade command

2025-02-18 20:25:13 +07:00

cli_intercept_listener_test.go

cmd/cli: preserve fallback listener port across reload in DNS intercept

2026-07-13 21:50:02 +07:00

cli_preflight_test.go

cmd/cli, internal/controld: bound API preflight by service lifetime

2026-08-14 15:27:54 +07:00

cli_test.go

cmd/cli: write new config file on reload

2024-08-07 15:51:11 +07:00

cli.go

Redact provision token in logs

2026-08-24 15:14:59 +07:00

commands_clients.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

commands_interfaces.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

commands_log.go

Add log tail command for live log streaming

2026-04-30 19:19:19 +07:00

commands_run.go

feat: add firewall mode DNS-resolved IP allowlist

2026-07-08 15:31:54 +07:00

commands_service_manager.go

refactor: rename service_manager.go and remove unused CommandRunner interface

2026-04-30 19:19:18 +07:00

commands_service_reload.go

feat: enhance logging in service commands with consistent logger usage

2026-04-30 19:19:18 +07:00

commands_service_restart.go

fix: restore DNS during invalid-device uninstall

2026-07-14 23:20:27 +07:00

commands_service_start.go

fix: restore DNS during invalid-device uninstall

2026-07-14 23:20:27 +07:00

commands_service_status_test.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-14 15:30:05 +07:00

commands_service_status.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-14 15:30:05 +07:00

commands_service_stop.go

fix: restore DNS during invalid-device uninstall

2026-07-14 23:20:27 +07:00

commands_service_uninstall.go

fix: restore DNS during invalid-device uninstall

2026-07-14 23:20:27 +07:00

commands_service.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-14 15:30:05 +07:00

commands_test.go

refactor: convert rootCmd from global to local variable

2026-04-30 19:19:18 +07:00

commands_upgrade_test.go

cmd/cli: stop the replacement before rolling its binary back

2026-08-14 15:29:49 +07:00

commands_upgrade.go

cmd/cli: stop the replacement before rolling its binary back

2026-08-14 15:29:49 +07:00

control_client.go

Add log tail command for live log streaming

2026-04-30 19:19:19 +07:00

control_server_test.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

control_server.go

cmd/cli: rate-limit PIN brute-force on control socket

2026-05-12 12:42:07 +07:00

dns_intercept_cleanup_windows_test.go

cmd/cli: drop stale intercept enforcement at startup, before API bootstrap

2026-08-14 15:29:06 +07:00

dns_intercept_darwin_test.go

fix: validate pf state before stabilization

2026-08-12 14:05:18 +07:00

dns_intercept_darwin.go

cmd/cli: drop stale intercept enforcement at startup, before API bootstrap

2026-08-14 15:29:06 +07:00

dns_intercept_ignored_change_windows_test.go

fix: validate pf state before stabilization

2026-08-12 14:05:18 +07:00

dns_intercept_lifecycle_windows_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-12 14:32:13 +07:00

dns_intercept_others.go

cmd/cli: drop stale intercept enforcement at startup, before API bootstrap

2026-08-14 15:29:06 +07:00

dns_intercept_settle_test.go

fix: validate pf state before stabilization

2026-08-12 14:05:18 +07:00

dns_intercept_settle.go

fix: validate pf state before stabilization

2026-08-12 14:05:18 +07:00

dns_intercept_windows.go

cmd/cli: drop stale intercept enforcement at startup, before API bootstrap

2026-08-14 15:29:06 +07:00

dns_proxy_test.go

cmd/cli: discard upstream answers whose question mismatches the request

2026-07-14 23:20:51 +07:00

dns_proxy.go

windows: adopt GP-managed NRPT catch-all

2026-08-12 14:32:13 +07:00

firewall_darwin_bridge_test.go

fix(firewall): support VM/container egress under macOS Firewall Mode

2026-08-04 14:12:15 +07:00

firewall_darwin_test.go

fix(firewall): support VM/container egress under macOS Firewall Mode

2026-08-04 14:12:15 +07:00

firewall_darwin.go

fix(firewall): support VM/container egress under macOS Firewall Mode

2026-08-04 14:12:15 +07:00

firewall_others.go

feat: add firewall mode DNS-resolved IP allowlist

2026-07-08 15:31:54 +07:00

firewall_test.go

feat: add firewall mode DNS-resolved IP allowlist

2026-07-08 15:31:54 +07:00

firewall_windows.go

feat: add firewall mode DNS-resolved IP allowlist

2026-07-08 15:31:54 +07:00

firewall.go

feat: add firewall mode DNS-resolved IP allowlist

2026-07-08 15:31:54 +07:00

hostname_test.go

all: add custom hostname support for provisoning

2024-10-24 13:05:48 +07:00

hostname.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

http_log_test.go

cmd/cli: workaround TB.TemdDir path too long for Unix socket path

2026-04-30 19:19:19 +07:00

http_log.go

refactor: replace Unix socket log communication with HTTP-based system

2026-04-30 19:19:18 +07:00

intercept_probe.go

windows: adopt GP-managed NRPT catch-all

2026-08-12 14:32:13 +07:00

library_retry_test.go

all: keep the first-attempt error when the direct-ip fallback also fails

2026-08-14 15:29:32 +07:00

library.go

all: keep the first-attempt error when the direct-ip fallback also fails

2026-08-14 15:29:32 +07:00

log_tail_test.go

Add log tail command for live log streaming

2026-04-30 19:19:19 +07:00

log_writer_test.go

log: persist internal runtime logs to disk

2026-04-30 19:19:19 +07:00

log_writer.go

dns_intercept: add WFP loopback protect for VPN block-outside-dns

2026-04-30 19:30:43 +07:00

loop_test.go

cmd/cli: improving loop guard test

2023-12-13 14:53:29 +07:00

loop.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

main_test.go

cmd/cli: stop the replacement before rolling its binary back

2026-08-14 15:29:49 +07:00

main.go

fix: restore DNS during invalid-device uninstall

2026-07-14 23:20:27 +07:00

metrics.go

security: default metrics server to loopback

2026-08-24 15:14:59 +07:00

net_darwin.go

refactor: consolidate network interface detection logic

2026-04-30 19:19:18 +07:00

net_linux.go

refactor: consolidate network interface detection logic

2026-04-30 19:19:18 +07:00

net_others.go

refactor: consolidate network interface detection logic

2026-04-30 19:19:18 +07:00

net_windows_test.go

refactor: improve network interface validation

2026-04-30 19:19:18 +07:00

net_windows.go

refactor: consolidate network interface detection logic

2026-04-30 19:19:18 +07:00

network_manager_linux.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

network_manager_others.go

cmd/cli: avoid accessing mainLog when possible

2026-04-30 19:19:18 +07:00

nextdns.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

nocgo.go

cmd/cli: support nocgo version for upgrade command

2025-02-18 20:25:13 +07:00

nrpt_external_gp_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-12 14:32:13 +07:00

nrpt_external_gp_windows_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-12 14:32:13 +07:00

nrpt_external_gp.go

windows: adopt GP-managed NRPT catch-all

2026-08-12 14:32:13 +07:00

nrpt_handback_windows_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-12 14:32:13 +07:00

nrpt_recovery_limiter_windows_test.go

Port NRPT recovery limits to master

2026-07-13 20:18:26 +07:00

nrpt_recovery_limiter_windows.go

Port NRPT recovery limits to master

2026-07-13 20:18:26 +07:00

os_darwin.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

os_freebsd.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

os_linux_test.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

os_linux.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

os_others.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

os_windows_test.go

Removing Windows Server support

2026-04-30 19:19:18 +07:00

os_windows.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

pf_ruleset_test.go

fix: validate pf state before stabilization

2026-08-12 14:05:18 +07:00

pf_ruleset.go

fix: validate pf state before stabilization

2026-08-12 14:05:18 +07:00

prog_darwin.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

prog_freebsd.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

prog_intercept_fallback_test.go

fix: validate pf state before stabilization

2026-08-12 14:05:18 +07:00

prog_linux_test.go

cmd/cli: fix systemd-networkd-wait-online blocks ctrld starts

2024-05-09 18:39:30 +07:00

prog_linux.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

prog_log.go

refactor: migrate from zerolog to zap logging library

2026-04-30 19:19:18 +07:00

prog_others.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

prog_test.go

fix: restore v1 intercept parity on master

2026-07-15 23:50:19 +07:00

prog_windows.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

prog.go

all: keep the first-attempt error when the direct-ip fallback also fails

2026-08-14 15:29:32 +07:00

prometheus.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

reload_others.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

reload_windows.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

resolvconf_darwin.go

cmd/cli: avoid accessing mainLog when possible

2026-04-30 19:19:18 +07:00

resolvconf_not_darwin_unix.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

resolvconf_test.go

docs: improve test resolv.conf handling documentation

2026-04-30 19:19:18 +07:00

resolvconf_windows.go

cmd/cli: avoid accessing mainLog when possible

2026-04-30 19:19:18 +07:00

resolvconf.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

search_domains_unix.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

search_domains_windows.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

self_delete_others.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

self_delete_windows.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

self_kill_others.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

self_kill_unix.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

self_upgrade_others.go

cmd/cli: handle stop signal from service manager

2025-03-26 23:18:36 +07:00

self_upgrade_windows.go

cmd/cli: handle stop signal from service manager

2025-03-26 23:18:36 +07:00

sema.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

service_args_darwin.go

feat: introduce DNS intercept mode infrastructure

2026-04-30 19:19:19 +07:00

service_args_others.go

feat: introduce DNS intercept mode infrastructure

2026-04-30 19:19:19 +07:00

service_args_windows.go

feat: introduce DNS intercept mode infrastructure

2026-04-30 19:19:19 +07:00

service_image_path_others.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-14 15:30:05 +07:00

service_image_path_test.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-14 15:30:05 +07:00

service_image_path_windows.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-14 15:30:05 +07:00

service_image_path.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-14 15:30:05 +07:00

service_others.go

Add comprehensive documentation to CLI components and core functionality

2026-04-30 19:19:18 +07:00

service_test.go

all: implement self-upgrade flag from API

2025-03-26 23:18:04 +07:00

service_windows.go

cmd/cli: drop stale intercept enforcement at startup, before API bootstrap

2026-08-14 15:29:06 +07:00

service.go

feat: capitalize all log messages for better readability

2026-04-30 19:19:18 +07:00

uninstall_invalid_test.go

fix: restore DNS during invalid-device uninstall

2026-07-14 23:20:27 +07:00

upstream_monitor.go

fix: back off unroutable IPv6 DoH upstream health-check spam

2026-07-09 16:41:55 +07:00

vpn_dns_test.go

fix: validate pf state before stabilization

2026-08-12 14:05:18 +07:00

vpn_dns.go

fix: validate pf state before stabilization

2026-08-12 14:05:18 +07:00

winres_windows.go

all: include file information in Windows builds

2024-02-07 14:40:18 +07:00