mirror of https://github.com/warmbly/warmbly.git synced 2026-08-18 16:01:18 +00:00

Files

T

History

Matthew Meszaros 1387541bf0 feat: make self-hosted auth work without a mail relay by rewriting the platform SMTP transport with real AUTH and TLS (it did neither, so SMTP_USERNAME/SMTP_PASSWORD were dead and every documented relay was unreachable), adding MAIL_TRANSPORT=smtp|log|ses with a log transport that prints codes so a fresh install can sign in with no relay, demoting the emailed login code to AUTH_LOGIN_CODE=always|new_device|off (off on self-host, per NIST SP 800-63B and OWASP ASVS), claiming the first owner through a single-use setup link or WARMBLY_BOOTSTRAP_* instead of register-then-psql, deriving every emailed URL from APP_URL rather than a hardcoded app.warmbly.com that leaked live reset tokens to the vendor, fixing the confirm hooks that read path params against paramless routes and broke login, register and reset confirmation in the dashboard everywhere, adding generic OIDC with PKCE, one-time state, verified nonce and (issuer,subject) identity binding, enforcing 2FA on the social paths that skipped it, adding a per-IP limiter and trusted-proxy handling to the unthrottled auth group, refusing boot on the published default secrets, and dropping mailpit from the default stack

2026-08-14 10:37:14 +02:00

public

feat: add a runtime config shim to the dashboard so a single built image reads its API url, app url, tracking domain, and turnstile key from container env via /config.js

2026-07-22 18:40:06 +02:00

src

feat: make self-hosted auth work without a mail relay by rewriting the platform SMTP transport with real AUTH and TLS (it did neither, so SMTP_USERNAME/SMTP_PASSWORD were dead and every documented relay was unreachable), adding MAIL_TRANSPORT=smtp|log|ses with a log transport that prints codes so a fresh install can sign in with no relay, demoting the emailed login code to AUTH_LOGIN_CODE=always|new_device|off (off on self-host, per NIST SP 800-63B and OWASP ASVS), claiming the first owner through a single-use setup link or WARMBLY_BOOTSTRAP_* instead of register-then-psql, deriving every emailed URL from APP_URL rather than a hardcoded app.warmbly.com that leaked live reset tokens to the vendor, fixing the confirm hooks that read path params against paramless routes and broke login, register and reset confirmation in the dashboard everywhere, adding generic OIDC with PKCE, one-time state, verified nonce and (issuer,subject) identity binding, enforcing 2FA on the social paths that skipped it, adding a per-IP limiter and trusted-proxy handling to the unthrottled auth group, refusing boot on the published default secrets, and dropping mailpit from the default stack

2026-08-14 10:37:14 +02:00

.dockerignore

feat: add production nginx Dockerfiles for the web dashboard and admin panel that build the SPA once and render /config.js from WARMBLY_* env at container start

2026-07-22 18:40:06 +02:00

.env.example

Turnstile modification

2026-02-11 17:54:49 +01:00

.gitignore

Dashboard with shadcn, tailwind, zustand & react-query

2026-01-30 08:47:26 +01:00

components.json

Dashboard with shadcn, tailwind, zustand & react-query

2026-01-30 08:47:26 +01:00

docker-entrypoint.sh

feat: make self-hosting work end to end and rewrite the guide around what was tested (#97 )

2026-08-13 09:47:46 +02:00

Dockerfile

feat: make self-hosting work end to end and rewrite the guide around what was tested (#97 )

2026-08-13 09:47:46 +02:00

eslint.config.js

feat: give each mailbox a human sending persona (randomized daily and hourly caps, send spacing, work start/end, lunch break and working weekdays, rolled once per local day in the mailbox's own timezone and applied across the campaign, warmup and smart-send schedulers), add campaign auto-pause guardrails that stop a campaign when its bounce, complaint or reply rate leaves the configured band, make mailbox rotation actually rotate for tag-resolved and all-mailbox campaigns, stop every scheduler from ever returning a slot in the past, and correct the mailbox min-gap field that stored seconds while labelling them minutes

2026-08-13 16:51:29 +02:00

index.html

feat: add a runtime config shim to the dashboard so a single built image reads its API url, app url, tracking domain, and turnstile key from container env via /config.js

2026-07-22 18:40:06 +02:00

LICENSE

Dashboard with shadcn, tailwind, zustand & react-query

2026-01-30 08:47:26 +01:00

nginx.conf

feat: add production nginx Dockerfiles for the web dashboard and admin panel that build the SPA once and render /config.js from WARMBLY_* env at container start

2026-07-22 18:40:06 +02:00

package.json

fix: clear the trivy security scan by bumping react-router-dom to 7.18.1 in web and admin, postcss to 8.5.23 across web/admin/docs (docs via a pnpm-workspace override since next pins 8.4.31), next and eslint-config-next to 16.2.11, and ignoring the RSC-only react-router CSRF advisory

2026-07-26 19:36:23 +02:00

pnpm-lock.yaml

feat: make self-hosting work end to end and rewrite the guide around what was tested (#97 )

2026-08-13 09:47:46 +02:00

pnpm-workspace.yaml

feat: make self-hosting work end to end and rewrite the guide around what was tested (#97 )

2026-08-13 09:47:46 +02:00

README.md

feat: implement unibox replies, warmup conversations, and daily email limits

2026-02-20 04:54:46 +00:00

tsconfig.app.json

ci: drop tsc from web build, relax Elixir warnings, pin picomatch / path-to-regexp

2026-05-23 16:37:53 +00:00

tsconfig.json

Dashboard with shadcn, tailwind, zustand & react-query

2026-01-30 08:47:26 +01:00

tsconfig.node.json

ci: drop tsc from web build, relax Elixir warnings, pin picomatch / path-to-regexp

2026-05-23 16:37:53 +00:00

vite.config.ts

feat: support exposed local dev hosts

2026-06-01 05:51:02 +02:00

vitest.config.ts

Dashboard with shadcn, tailwind, zustand & react-query

2026-01-30 08:47:26 +01:00

README.md

Warmbly Web App

React + TypeScript frontend for Warmbly.

Stack

React 19
Vite (Rolldown)
TypeScript
TanStack Query
Zustand
Tailwind CSS 4

Prerequisites

Node.js 20+
pnpm 10+

Setup

cd web
pnpm install
cp .env.example .env

Run

pnpm dev

Default dev URL: http://localhost:5173

Quality Checks

pnpm lint
pnpm test:run
pnpm build

Project Layout

src/app route pages and layouts
src/components UI and feature components
src/lib/api API clients, hooks, and models
src/stores Zustand store slices