19 Commits

Author	SHA1	Message	Date
Leopere	bd84b0a578	Include remaining template and route changes ... Made-with: Cursor	2026-03-03 18:11:38 -05:00
Leopere	bbc828fa35	Fall back to LDAP group check when Authelia session is stale ... The Remote-Groups header reflects groups at login time. If a user was added to 'customers' after logging in (via /activate), the dashboard would show "No Active Subscription". Now checks LDAP directly as fallback. Made-with: Cursor	2026-03-03 18:11:31 -05:00
Leopere	1f8f50d50b	Redirect paid-but-not-activated users from landing to /activate ... If a logged-in user has a Stripe customer ID but isn't in the customers group yet, they've paid but haven't activated. Send them to /activate instead of showing "No Active Subscription". Made-with: Cursor	2026-03-03 18:07:57 -05:00
Leopere	91c0411b90	Add /resend-reset endpoint so set-password button sends email directly ... The welcome page button was linking to Authelia's reset page which requires an active login session. Now it POSTs to /resend-reset which calls the Authelia API server-side and sends the email immediately. Button text updated from "Reset Password" to "Set Password". Made-with: Cursor	2026-03-03 17:30:38 -05:00
Leopere	aa1201560d	Show welcome page for any user not yet in customers group ... Previously, users already in LDAP but not yet activated (e.g. webhook created the user, or lapsed sub) were redirected to the auth-gated dashboard. Now only active customers (in 'customers' group) skip the welcome page — everyone else sees onboarding with password reset. Made-with: Cursor	2026-03-03 17:20:21 -05:00
Leopere	c7d19ed20d	Fix success page skipped due to webhook race condition ... The webhook was provisioning the user before the success page loaded, causing IsNew=false and skipping the welcome/onboarding page entirely. Now: - Webhook only ensures user+stripe ID as a backstop (no password email) - Success page is the sole owner of password reset + welcome flow - Uses group membership (not IsNew) to distinguish new vs returning: if already in 'customers' group -> dashboard, otherwise -> welcome Made-with: Cursor	2026-03-03 17:16:48 -05:00
Leopere	677bef195f	Trigger Authelia password reset email on new user checkout ... The triggerPasswordReset function existed but was never called. New users now receive a set-password email immediately after their Stripe checkout completes. Made-with: Cursor	2026-03-03 17:13:37 -05:00
Leopere	c68edc70d1	Switch customer stack to Gitea + PostgreSQL two-service pattern ... - web: Gitea (self-hosted Git), exposed via Traefik behind Authelia - db: PostgreSQL 16, internal backend network only, never exposed - Establishes the canonical web+db template structure for future products Made-with: Cursor	2026-03-03 17:02:49 -05:00
Leopere	463483f769	Unify stack action button behaviour via single event listener ... Replace per-form onsubmit handlers with a single script that handles all data-stack-action forms identically: confirm if needed, then disable the button and show a contextual loading label. Made-with: Cursor	2026-03-03 17:00:58 -05:00
Leopere	239d2c07e1	Disable stack action buttons on submit to prevent spam ... Made-with: Cursor	2026-03-03 16:58:56 -05:00
Leopere	084548fcd7	Fix dashboard stack state UI after Destroy ... - Inverted condition was showing 'being provisioned' when stack not deployed - Actions block was gated on StackDeployed so no Start button after destroy - Start button now always shown when not running - Destroy button only shown when stack is deployed - 'Being provisioned' message replaced with accurate 'stopped' message Made-with: Cursor	2026-03-03 16:56:48 -05:00
Leopere	6356cbb1da	Fix Destroy being immediately undone by dashboard auto-redeploy ... Dashboard was auto-deploying any missing stack on every page load. This stomped on the Destroy action. Stack creation only happens at activation and via explicit Start — not on dashboard render. Made-with: Cursor	2026-03-03 16:52:31 -05:00
Leopere	e71831cf9d	Switch customer stack product to Uptime Kuma ... Each customer now receives a dedicated Uptime Kuma monitoring instance at their subdomain. Drops the unused Redis sidecar from the template. Made-with: Cursor	2026-03-03 16:49:50 -05:00
Leopere	a92cbe9b72	Add header to stack-template, force-update images on deploy ... - stack-template.yml: prominent comment explaining this is the product being sold and how to swap in the real application image - deploy-stack-dev.sh: force-update locally-built images after stack deploy so swarm always runs the freshly built container Made-with: Cursor	2026-03-03 16:48:03 -05:00
Leopere	74a24ffe2a	Fix subscription status not showing Expiring for cancel_at_period_end subs ... - Also check sub.CancelAt > 0 (handles explicit cancel_at date, not just period-end) - Fall back to item CurrentPeriodEnd for the display date since current_period_end moved off the top-level Subscription object in stripe-go v84 Made-with: Cursor	2026-03-03 16:00:24 -05:00
Leopere	159a0b4455	Remove Rebuild button from dashboard UI ... Made-with: Cursor	2026-03-03 15:55:21 -05:00
Leopere	b66dfa053e	Force auth on all customer stacks, migrate to swarm stack.yml ... - Remove public/private toggle — all customer stacks now always deploy behind authelia-auth middleware, no exceptions - Remove ALLOW_CUSTOMER_STACK_AUTH_TOGGLE and CUSTOMER_STACK_REQUIRE_AUTH_DEFAULT config, env vars, routes, and UI - Replace docker-compose.dev.yml + docker-compose.swarm-dev.yml with unified stack.yml for swarm deployment - Various handler, ldap, stripe, swarm, and template additions from prior work sessions Made-with: Cursor	2026-03-03 15:51:25 -05:00
Leopere	6fcdd1262d	Bake git commit into Go binary for version traceability ... - Add internal/version package with ldflags-injected Commit/BuildTime - Dockerfile accepts BUILD_COMMIT/BUILD_TIME args, passes via -ldflags - Log version on startup, expose GET /version endpoint - Show commit hash badge in bottom-right of landing + dashboard pages - Deploy scripts gate on clean git tree and pass commit to build - Remove staging files, misc config updates Made-with: Cursor	2026-03-03 12:51:12 -05:00
Leopere	ac24f6d1dc	Add ss-atlas service, config updates, ignore IDE cruft ... Made-with: Cursor	2026-03-03 11:21:03 -05:00