Issues

• chore: follow-ups from database maintenance review (back-off edge cases, tmp dir ownership, naming)

  databaseenhancement
  Wikid82/Charon#1427 · Filter by author Wikid82 opened on Oct 1, 2026

• test: backend tests leak large temp files into /tmp (charon-restore-db-*, pruner scratch dirs)

  backendbugdatabasetesting
  Wikid82/Charon#1426 · Filter by author Wikid82 opened on Sep 30, 2026

• fix: Orthrus agent image may report version 'latest' instead of its release version

  bugtesting
  Wikid82/Charon#1425 · Filter by author Wikid82 opened on Sep 30, 2026

• feat: automatic database maintenance (incremental vacuum and guided compaction)

  caddydatabaseenhancementui
  Wikid82/Charon#1422 · Filter by author Wikid82 opened on Sep 30, 2026

• i18n: translate the systemSettings.uptime block into de, es, fr and zh

  enhancementfrontend
  Wikid82/Charon#1421 · Filter by author Wikid82 opened on Sep 30, 2026

• charon db is huge (4.8 GB) due to uptime_heartbeats

  Wikid82/Charon#1419 · Filter by author driftywinds opened on Sep 30, 2026
  4

  

• enhancement: option for a security header profile to strip upstream values of headers it disables

  backendcaddyenhancementlowsecurity
  Wikid82/Charon#1417 · Filter by author Wikid82 opened on Sep 30, 2026
  

• bug: boolean fields with gorm default:true can't be set to false (security_headers_enabled, security header profile toggles)

  backendbuglowsecurity
  Wikid82/Charon#1416 · Filter by author Wikid82 opened on Sep 30, 2026
  

• fix: show the server's error message when certificate export fails

  bugfrontendssl
  Wikid82/Charon#1414 · Filter by author Wikid82 opened on Sep 29, 2026
  

• bug: security headers are duplicated (and CORP conflicts) on proxy hosts whose upstream sends the same headers

  backendbugcaddylowsecurity
  Wikid82/Charon#1402 · Filter by author Wikid82 opened on Sep 25, 2026
  

• test: firefox project silently matches no tests for tests/security-enforcement

  lowsecuritytesting
  Wikid82/Charon#1399 · Filter by author Wikid82 opened on Sep 25, 2026
  

• hardening: fail closed when rate-limit guards or settings are misconfigured

  backendlowsecurity
  Wikid82/Charon#1398 · Filter by author Wikid82 opened on Sep 25, 2026
  

• enhancement: per-browser device-cookie bucket alongside the per-IP login throttle

  backendenhancementmediumsecurity
  Wikid82/Charon#1397 · Filter by author Wikid82 opened on Sep 25, 2026
  

• enhancement: notify operators about throttled login attempts (async, debounced)

  backendenhancementlowsecurity
  Wikid82/Charon#1396 · Filter by author Wikid82 opened on Sep 25, 2026
  

• decision: wire up forward-auth 'Require Login' or remove the unused pieces

  backendcaddyfeaturefrontendlowsecurityui
  Wikid82/Charon#1395 · Filter by author Wikid82 opened on Sep 25, 2026
  

• bug: security metrics collectors are not exposed at /metrics

  backendbuglowmonitoringsecurity
  Wikid82/Charon#1394 · Filter by author Wikid82 opened on Sep 25, 2026
  

• chore: stop citing docs/plans/current_spec.md from code and tests

  backenddocumentationfrontendlowtesting
  Wikid82/Charon#1393 · Filter by author Wikid82 opened on Sep 25, 2026
  

• test: replace unconditional t.Skip tests with real tests or remove them

  backendlowsecuritytesting
  Wikid82/Charon#1392 · Filter by author Wikid82 opened on Sep 25, 2026
  

• Track DNS provider coverage: caddy-dns modules vs Charon backend support

  backendcaddyenhancementfrontendsecurity
  Wikid82/Charon#1374 · Filter by author Wikid82 opened on Sep 22, 2026
  

• Hide disabled create/edit/delete controls for standard users on read-classified admin pages

  securityssl
  Wikid82/Charon#1318 · Filter by author Wikid82 opened on Sep 9, 2026
  

• actionlint v1.7.12 hangs on large quoted heredocs in run: steps (shellcheck integration)

  documentation
  Wikid82/Charon#1289 · Filter by author Wikid82 opened on Aug 27, 2026
  

• chore(frontend): patch coverage gap in ImportSitesModal.tsx / Layout.tsx (84.6%, below 85% threshold)

  backendfrontendlowtesting
  Wikid82/Charon#1279 · Filter by author Wikid82 opened on Aug 24, 2026
  

• test: shared-cache in-memory SQLite DSN collisions under -race + t.Parallel() (101+ sites)

  backendgomediumsecuritytesting
  Wikid82/Charon#1278 · Filter by author Wikid82 opened on Aug 24, 2026
  1

  

• chore(tests): git add -u in golangci-lint-fast.sh restages files outside the current commit's pathspec

  ci-cdgolowtesting
  Wikid82/Charon#1277 · Filter by author Wikid82 opened on Aug 24, 2026
  

• Dependency Dashboard

  backendcaddycrowdsecfrontendsecuritytesting
  Wikid82/Charon#1226 · Filter by author renovate opened on Aug 8, 2026