summaryrefslogtreecommitdiffstats
path: root/roseh.moe.go
AgeCommit message (Collapse)AuthorFilesLines
2025-11-21Slightly simplify the int encodingRose Hogenson1-14/+4
2025-11-21Separate MAC by domainRose Hogenson1-25/+18
2025-11-21Simplify the password hash and get rid of pbkdf2Rose Hogenson1-5/+6
Since the password already has 16 bytes of security, pbkdf2 isn't necessary here. We can use a simple sha256. I promise to pick a secure password.
2025-11-21Use a weird encoding for the time.TimeRose Hogenson1-14/+47
This way we can save 19 whole bytes per request 😲
2025-11-15Remove debugRose Hogenson1-2/+1
2025-11-15Fix cookie names and domainRose Hogenson1-6/+11
2025-11-15DebugRose Hogenson1-1/+2
2025-11-15Fix typoRose Hogenson1-1/+1
2025-11-15Preserve redirect path on errorRose Hogenson1-1/+2
2025-11-15Fix cross-domain loginRose Hogenson1-5/+9
2025-11-15Protect the reverse proxy with my hand-rolled authRose Hogenson1-46/+79
Defense in depth??
2025-11-10Validate the QR codeRose Hogenson1-5/+19
Since the qr code is generated by a 3rd party dependency that I probably won't update, let's make sure to only pass it trusted input.
2025-11-10IP?Rose Hogenson1-1/+1
2025-11-10Fix jellyfin portRose Hogenson1-1/+1
2025-11-10Get the credentials directory from a flagRose Hogenson1-3/+3
2025-11-10Add back jellyfin proxyRose Hogenson1-1/+18
We don't need no stupid nginx
2025-11-02Fix a panicRose Hogenson1-1/+4
2025-11-02Improve the upload success screenRose Hogenson1-1/+9
2025-11-02Add QR codeRose Hogenson1-0/+12
2025-11-02Remove server sent eventsRose Hogenson1-68/+47
2025-10-28Switch to cclRose Hogenson1-18/+11
2025-10-25Fix service configRose Hogenson1-4/+10
2025-10-25asspb fixesRose Hogenson1-12/+6
2025-10-25Use asspb instead of iniRose Hogenson1-39/+30
2025-10-14Revert "Remove CSRF tokens"Rose Hogenson1-32/+76
This reverts commit 21d7462b057838eb173145d79d2b9fd6c71e8053. This was a great idea, but tanjiro is still on Go 1.24
2025-10-14Remove CSRF tokensRose Hogenson1-76/+32
I think the built-in cross-origin protection will be good enough.
2025-10-08Validate that secrets were loadedRose Hogenson1-0/+6
2025-10-08Fix typoRose Hogenson1-1/+1
2025-10-07Use ini for the secrets file as wellRose Hogenson1-43/+29
2025-10-07LogRose Hogenson1-0/+1
2025-10-07Use an INI file for configRose Hogenson1-23/+91
2025-10-07Make redirects configurableRose Hogenson1-15/+27
2025-10-07AGPL and some cleanupRose Hogenson1-2/+14
2025-10-07Fix vanity URL (again)Rose Hogenson1-1/+18
2025-10-07Remove unnecessary package redirectionRose Hogenson1-17/+0
2025-10-07Use a vanity URLRose Hogenson1-2/+19
2025-10-07Vanity url?Rose Hogenson1-0/+19
2025-10-07Bring back pbkdf2Rose Hogenson1-16/+10
2025-10-06Add uploader toolRose Hogenson1-8/+10
2025-10-06Simplify simplify simplifyRose Hogenson1-51/+38
2025-10-05Remove timeoutsRose Hogenson1-6/+1
2025-10-05Bring back the notepadRose Hogenson1-2/+251
2025-10-05Remove unused flagsRose Hogenson1-4/+2
2025-10-05Implement a "magic wormhole" file-sharing solutionRose Hogenson1-659/+93
2025-10-04Allow downloading without gobRose Hogenson1-57/+90
2025-10-04Allow http multipart uploadRose Hogenson1-32/+150
2025-10-01Linked list is cool, but have you heard of arrayRose Hogenson1-49/+45
2025-10-01Fix the n^2 using a linked listRose Hogenson1-85/+96
2025-09-30Allow appending to notesRose Hogenson1-38/+100
Right now it's n^2 which is a big problem (to be fixed later)
2025-09-29Implement "online authenticated encryption"Rose Hogenson1-33/+25
generated by cgit v1.3.1 (git 2.54.0) at 2026-09-04 15:50:32 +0000