Add /api/media/** route mapping to MediaService for public chat key management
Add public chat gateway with API key validation, rate limiting, and WebSocket proxy
Adds public chat endpoints at /api/public-chat/** for anonymous website chat. Includes API key validation (SHA-256 hashed, Redis-cached), per-key and per-IP rat...
Use getServerName() instead of getHeader(Host) for original host resolution
ForwardedHeaderFilter consumes X-Forwarded-Host and adapts getServerName() accordingly, while getHeader(Host) returns the raw HTTP Host which may be a K8s inter...
Use HTTP on port 80 for meet service URL to match other services
The HTTPS endpoint on 8443 causes SSL cert mismatch when routing through K8s internal DNS. All other services use HTTP on port 80.
Adicionar meet.service.url ao mapa de configuração do K8s para evitar falhas no APIService
Preservar o X-Forwarded-Host a montante em vez de sobrescrever com o próprio Host
Quando um proxy upstream (Next.js) define X-Forwarded-Host para o navegador host original, APIService agora preserva-lo em vez de substituir com a sua Cabeçalho...
Route /api/notes to KBService instead of SecurityService
Notes management has been moved from SecurityService to KBService.
Explicitly forward visitor IP to downstream services
ForwardedHeaderFilter consumes X-Forwarded-For from the incoming request, so when APIService forwards to SecurityService via RestTemplate the header is missing....
Move AccessEnforcementFilter to scanned package, revert ComponentScan
The widened @ComponentScan caused a corsFilter bean conflict between CorsConfig and WebConfig. Moved the filter into com.kamo.api.app.config (already scanned by...
Add Redis connection config to K8s configmap
APIService pod was failing to start because spring-boot-starter-data-redis auto-configuration couldn't connect to Redis at localhost:6379. Points to redis.kamo....
Add access enforcement filter for IP-based access control
Redis-backed servlet filter that evaluates whitelist/blacklist/temp-block rules on every inbound request. Adds spring-boot-starter-data-redis dependency and Red...
Add OAuth callback forwarding with no-redirect RestTemplate
- Add noRedirectRestTemplate bean (HttpClient.Redirect.NEVER) so the 302 from VOIPService's OAuth callback is passed through to the browser instead of being...
Add proxyDav route, fix forward() body guard for DAV methods, add email service URL
Add gateway routes for KB and RAG services
- /api/kb/** routes to kamowskb-service - /api/rag/** routes to kamowsrag-service - Updated application.yml and k8s configmap with service URLs
Add /wopi/** route forwarding to DocsService
Docs needs to reach WOPI endpoints via api.kamocrm.com.
Use JdkClientHttpRequestFactory to support PATCH method forwarding
The default RestTemplate uses SimpleClientHttpRequestFactory (HttpURLConnection) which doesn't support the PATCH HTTP method, causing branch-titles save to fail...
Corrigir a atualização do kubeconfig para usar os IPs VPN do WireGuard (10.8.x.x) em vez dos IPs antigos da Tailscale
Refactor para implantação paralela para k1m1 e k2m1
- Dividir construção e implantação em trabalhos separados - Implantar para k1m1 e k2m1 em paralelo após completar a compilação - Reduz significativamente o temp...
Reverter para o driver de docker para construções mais rápidas - remove a sobrecarga do docker-container
Mudar para o driver do docker-container com cache para o desempenho de construção ideal
Adicionar configuração Buildx com configuração de registro inseguro para resolver erros de autenticação 401
Add preStop hooks, probes, and increase termination grace period to prevent deployment timeouts
Properly forward multipart/form-data by rebuilding parts for RestTemplate
Revert "fix(proxy): route /api/security/imaging/* to SecurityService /api/imaging/*"
This reverts commit ****************
Route /api/security/imaging/* to SecurityService /api/imaging/*
Como o que vês no transporte?
Tudo isso chega em seu espaço de trabalho por conta própria. Comece no plano gratuito e leia esta página novamente em um mês.
