merge v3.1.3 - #387
Conversation
PR to unstable
Tailscale: OAuth-based manager, API routes, settings UI, reconciler hooks, config loader support, and Docker/env wiring.
Add Slovak localization
Signed-off-by: Emre Koca <110906681+kocaemre@users.noreply.github.com>
Signed-off-by: Emre Koca <110906681+kocaemre@users.noreply.github.com>
…D and dep. updates packages - npm audit
…dation Fix SimpleCache pattern invalidation
Update health check docs to use wget
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: ed1837aaf9
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| return [ | ||
| policy | ||
| for policy in group.get("policies", []) | ||
| if not is_default_deny_policy(policy) |
There was a problem hiding this comment.
When an access group contains only the generated deny-everyone policy (for example, authenticated mode with no email/IdP rules, or an imported deny-all policy), this filter turns it into an empty policy list. resolve_access_group_policies() then returns no policies and the callers skip or delete the Cloudflare Access application, which makes the tunnel hostname unprotected instead of explicitly denied. Please keep the deny policy when it is the group's only effective rule, and only strip the default deny when there are preceding allow/bypass rules.
Useful? React with 👍 / 👎.
3 participants
see changelog for patch notes