1c5e60d0c105ffb68ca7e05cbf96adfb9bfe7c4e
71%
main: 63%

Ran 30 Jun 2023 03:34AM UTC

Jobs 1

Files 197

Run time 4s

Badge

Embed ▾

pending completion

Build # 1c5e60d0c105ffb68ca7e05cbf96adfb9bfe7c4e

Build Type

push

github

Committed by

web-flow

Commit Message

Disable `on_demand` cert provisioning for Caddy (#1720)

As described in the Caddy documentation, `on_demand` [must be
restricted](https://caddyserver.com/docs/automatic-https#using-on-demand-tls)
to prevent abuse. In our case, **it was not**, leading to DoS vector in
which a malicious client could DoS the `caddy` service by repeatedly
initiating TLS requests with invalid domains at a rate high enough for
the ACME service to block the Firezone server.

Verified the new caddy configuration works as expected.

Run Details

1967 of 2783 relevant lines covered (70.68%)

218.97 hits per line

Subprojects

ID	Flag name	Job ID	Ran	Files	Coverage
1	/jobs/124145117	1c5e60d0c105ffb68ca7e05cbf96adfb9bfe7c4e.1	30 Jun 2023 03:34AM UTC	0	70.68	GitHub Action Run

Source Files on build 1c5e60d0c105ffb68ca7e05cbf96adfb9bfe7c4e

Detailed source file information is not available for this build.

firezone / firezone / 1c5e60d0c105ffb68ca7e05cbf96adfb9bfe7c4e
71%
main: 63%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Subprojects

Source Files on build 1c5e60d0c105ffb68ca7e05cbf96adfb9bfe7c4e

firezone / firezone / 1c5e60d0c105ffb68ca7e05cbf96adfb9bfe7c4e 71% main: 63%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Subprojects

Source Files on build 1c5e60d0c105ffb68ca7e05cbf96adfb9bfe7c4e

firezone / firezone / 1c5e60d0c105ffb68ca7e05cbf96adfb9bfe7c4e
71%
main: 63%

README BADGES
x