Go to file

root 086bd1e6a3 fix: strengthen SSRF guard in fetchUrl with DNS resolution check

Add exported isBlockedAddress(ip) helper covering loopback, 0.0.0.0,
private v4 (10/8, 172.16-31, 192.168/16), link-local (169.254/16,
fe80::/10), and IPv6 ULA (fc00::/7). In fetchUrl, after the existing
literal-hostname fast-reject, resolve the hostname via dns.lookup
(all:true) when using the real fetcher and block if any resolved
address isBlockedAddress. Injected fetcher (tests) skips DNS.
Drop unused contentType from return value.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-09 09:11:42 +10:00

config

chore(release): 2.0.0 — drop -alpha; Void 1 retired, CTs renamed

2026-06-08 20:09:11 +10:00

deploy

docs(deploy): arp-scan + setcap for LAN device discovery

2026-06-08 21:28:51 +10:00

docs

docs(plan): device icons, last-seen & uploadable icon sets — 13-task TDD plan

2026-06-09 08:22:58 +10:00

lib

fix: strengthen SSRF guard in fetchUrl with DNS resolution check

2026-06-09 09:11:42 +10:00

migrate

feat(ui): project details panel + compact/responsive cards; rename Sentinel→Yerin (red); migrate research_notes

2026-06-05 00:19:16 +10:00

public

feat(devices): styles for device icons, picker, settings panel

2026-06-09 09:03:45 +10:00

tests

fix: strengthen SSRF guard in fetchUrl with DNS resolution check

2026-06-09 09:11:42 +10:00

workers

feat(workers): free Ollama VRAM before loading Whisper on the GPU

2026-06-05 21:12:05 +10:00

.env.example

chore: initial repo scaffolding

2026-05-31 01:22:10 +10:00

.gitignore

chore: gitignore python build artifacts (untrack pycache/egg-info)

2026-06-01 22:23:06 +10:00

AGENTS.md

docs: add awesome-selfhosted as the research starting point (AGENTS.md)

2026-06-08 22:16:38 +10:00

CHANGELOG.md

feat(sv): Storage · capacity card — ZFS pools, dropped pools, per-CT disk

2026-06-09 03:27:15 +10:00

package-lock.json

feat(icons): ingest — file processor, zip unpack, URL fetch (guards)

2026-06-09 08:36:32 +10:00

package.json

feat(icons): ingest — file processor, zip unpack, URL fetch (guards)

2026-06-09 08:36:32 +10:00

README.md

chore: initial repo scaffolding

2026-05-31 01:22:10 +10:00

server.js

feat(api): /api/icon-sets — list/serve/upload(zip,url)/delete

2026-06-09 08:39:20 +10:00

vitest.config.js

feat(repos): spaces, projects, tasks with audit stub

2026-05-31 02:11:31 +10:00

README.md

Void 2.0

Homelab orchestrator + canonical knowledge store. Cradle-themed. Successor to Void 1.x (CT 301). Spec at /project/docs/superpowers/specs/2026-05-31-void-v2-design.md.

Layout

void-server (this repo) — Node API, MCP, UI, cron, agent runtime
void-workers — Python ingest workers (separate repo, later plan)

Quick start (dev)

Provision void2-db LXC (see deploy/README.md)
Install Postgres + pgvector on void2-db
npm install
cp .env.example .env and edit
npm run migrate
npm start
curl -H "Authorization: Bearer $OWNER_TOKEN" http://localhost:3000/health

Languages

JavaScript 87.5%

CSS 6.4%

Python 5.2%

Shell 0.7%

HTML 0.2%