hsiegeln 0fe084bcb2 fix: restrict key.pem file permissions to 0600 (owner-only) ...

All private key writes now use writeAtomicRestricted which sets POSIX
owner-read/write permissions after writing. Gracefully skips on
non-POSIX filesystems (Windows dev).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-10 19:49:07 +02:00

.gitea/workflows

ci: exclude new integration tests from CI (no Testcontainers in CI)

2026-04-09 23:11:45 +02:00

.mvn/wrapper

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

audit

Add SaaS platform UX polish design spec with audit findings

2026-04-09 19:39:33 +02:00

docker

fix: register /platform/ as post-logout redirect URI, improve sidebar contrast

2026-04-10 13:41:18 +02:00

docs

feat: certificate management with stage/activate/restore lifecycle

2026-04-10 18:29:02 +02:00

src

fix: restrict key.pem file permissions to 0600 (owner-only)

2026-04-10 19:49:07 +02:00

ui

feat: support password-protected private keys

2026-04-10 19:44:09 +02:00

.env.example

fix: register API resource in Logto for JWT access tokens

2026-04-05 01:01:32 +02:00

.gitattributes

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

.gitignore

fix: use CAMELEER_API_URL env var for server-ui container

2026-04-10 09:16:42 +02:00

CLAUDE.md

docs: add tenant CA cert management to CLAUDE.md and HOWTO.md

2026-04-10 19:36:51 +02:00

docker-compose.dev.yml

feat: clean control plane — remove all example tenant resources

2026-04-10 08:24:28 +02:00

docker-compose.yml

feat: certificate management with stage/activate/restore lifecycle

2026-04-10 18:29:02 +02:00

Dockerfile

refactor: deployment infrastructure cleanup (4 fixes)

2026-04-07 17:08:37 +02:00

HOWTO.md

docs: add tenant CA cert management to CLAUDE.md and HOWTO.md

2026-04-10 19:36:51 +02:00

mvnw

fix: set execute permission on Maven wrapper

2026-04-04 15:34:52 +02:00

mvnw.cmd

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

pom.xml

feat: add TenantProvisioner interface with auto-detection

2026-04-09 22:29:01 +02:00

STRATEGY.md

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

traefik.yml

feat: HTTPS admin console via Traefik with NODE_TLS_REJECT_UNAUTHORIZED

2026-04-07 00:44:33 +02:00

Description

Multi-tenant SaaS platform — Camel application runtime with built-in observability. Wraps cameleer3 agent + server.

8.4 MiB

Languages

Java 59.7%

TypeScript 30.2%

Shell 8.2%

Dockerfile 0.9%

CSS 0.8%

Other 0.2%