Administrator/Multi-Hoster-Upload
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 262 Wiki Activity

262 Releases 270 Tags

RSS Feed
  • v3.3.86 3f8854693a
    Compare

    Multi-Hoster-Upload v3.3.86 Stable

    Administrator released this 2026-06-19 19:39:15 +02:00 | 57 commits to master since this release

    Reach diagnostics over Tailscale (network bind + fail-closed IP allowlist)

    The read-only diagnostics agent can now be reached over Tailscale (or any private tunnel) directly -- the same way the rest of your tooling is -- instead of requiring an SSH local-forward. This matches the rd-diagnostics-mcp model.

    • New "Im Netzwerk" visibility mode binds the agent to 0.0.0.0, gated by a fail-closed IP allowlist: only the source IPs/CIDRs you list may connect (loopback is always allowed), in addition to the token. An empty allowlist means loopback only. For Tailscale: set the allowlist to your tailnet (e.g. 100.64.0.0/10) and put the server's Tailscale IP / MagicDNS name as the code address -- the bridge then connects straight over the tailnet, no SSH forward.
    • The connection code now carries the host, so you just hand over the code and the bridge dials the right server automatically. Suggested-host chips (from the machine's network interfaces, where the Tailscale IP shows up) make picking the address one click.
    • "Nur lokal" (127.0.0.1) stays the default and is reached via a tunnel as before.

    Transport is still plaintext ws://; the tunnel (Tailscale/WireGuard) is the confidentiality layer, and the allowlist + token are the access gate. Only bind to the network behind a tunnel/VPN you trust. Read-only, opt-in, off by default -- unchanged.

    Downloads