Administrator/Multi-Hoster-Upload
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 260 Wiki Activity

260 Releases 268 Tags

RSS Feed
  • v3.3.84 b423357a2c
    Compare

    Multi-Hoster-Upload v3.3.84 Stable

    Administrator released this 2026-06-19 17:48:08 +02:00 | 55 commits to master since this release

    Remote read-only diagnostics (opt-in, dormant by default)

    Adds a way for support to read a server's state — logs, errors, queue, redacted config — without any screen or input access. Enable "Diagnose-Zugriff" in Settings to start a read-only diagnostic agent (bound to 127.0.0.1) and get a connection code.

    A local MCP gateway (gateway/) connects by code and exposes read-only tools: server_health (one-shot hub), read_log, list_logs, list_errors, get_queue_state, get_history, get_config_redacted, get_rotation_state, get_system_info, get_app_events.

    Safety:

    • No screen capture, no input control, no write/exec — a hardcoded read-only whitelist is the only authority.
    • Secrets are redacted before anything leaves the box: stored credentials (passwords, API keys, tokens, cookies, webhook URLs) are value-scrubbed everywhere, and common secret shapes (Bearer/token/cookie/webhook/query-key) are pattern-scrubbed in free-text log and error fields. The doodstream debug log (live API keys) is never readable.
    • Log access uses logical names only (no path traversal); timing-safe token compare; brute-force lockout (5 failures / 60s).
    • Remote access goes through an SSH/VPN tunnel to loopback. Direct LAN/Internet binding stays disabled until encrypted transport (wss/TLS) ships.

    The diagnostic agent only runs when you explicitly enable it per server; this release changes nothing else.

    Downloads