HH-620: expose SSClash Web UI on port 9091 #3

Merged
rogee merged 4 commits from agent/hh-620-expose-9091 into main 2026-08-24 17:57:11 +08:00
Owner

Closes HH-620

  • publish 9091 and 7890 on host loopback by default while keeping 9090 private
  • require a host HTTPS reverse proxy for external 9091 access; direct public HTTP is not configurable in Compose
  • provide explicit 7890 public/trusted-network opt-in through PROXY_BIND
  • initialize fresh volumes with SSClash setpass before listeners and strictly validate persisted authentication
  • repair only SSClash-managed provider links during same-volume container rebuilds
  • keep bootstrap credentials out of service environments, runtime files, and logs
  • smoke-test loopback-only defaults, proxy-only public opt-in, non-loopback unreachability, authenticated 9091, and same-volume rebuild/login

Tests: ./scripts/test.sh; ./tests/container-smoke.sh; git diff --check

Closes HH-620 - publish 9091 and 7890 on host loopback by default while keeping 9090 private - require a host HTTPS reverse proxy for external 9091 access; direct public HTTP is not configurable in Compose - provide explicit 7890 public/trusted-network opt-in through `PROXY_BIND` - initialize fresh volumes with SSClash `setpass` before listeners and strictly validate persisted authentication - repair only SSClash-managed provider links during same-volume container rebuilds - keep bootstrap credentials out of service environments, runtime files, and logs - smoke-test loopback-only defaults, proxy-only public opt-in, non-loopback unreachability, authenticated 9091, and same-volume rebuild/login Tests: `./scripts/test.sh`; `./tests/container-smoke.sh`; `git diff --check`
rogee added 1 commit 2026-08-24 16:13:18 +08:00
HH-620: expose SSClash Web UI on port 9091
Docker image / Test (pull_request) Successful in 36s
Docker image / Build and publish (pull_request) Successful in 2m19s
8d6e7c0098
Co-authored-by: multica-agent <github@multica.ai>
rogee added 1 commit 2026-08-24 16:45:06 +08:00
HH-620: require authentication before exposing setup
Docker image / Test (pull_request) Successful in 39s
Docker image / Build and publish (pull_request) Successful in 2m41s
ab0f9d3eec
Co-authored-by: multica-agent <github@multica.ai>
rogee added 1 commit 2026-08-24 17:18:32 +08:00
HH-620: harden authentication and volume rebuild
Docker image / Test (pull_request) Successful in 38s
Docker image / Build and publish (pull_request) Successful in 2m15s
6a349f62c8
Co-authored-by: multica-agent <github@multica.ai>
rogee added 1 commit 2026-08-24 17:44:58 +08:00
HH-620: secure default host bindings
Docker image / Test (pull_request) Successful in 39s
Docker image / Build and publish (pull_request) Successful in 3m2s
925ce84339
Co-authored-by: multica-agent <github@multica.ai>
rogee merged commit d61799d180 into main 2026-08-24 17:57:11 +08:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: rogee/mohomo-docker#3