dns-autoresolver

T

fix(phase3): skip templateless domains in scheduler; block CGNAT range in webhook SSRF guard

Domains imported without a template (TemplateID == nil) are a valid,
unconfigured state, not a failure — RunOnce now skips them before
calling checkDomain instead of letting LoadDomain's "no template" error
turn into StatusError and a spammy unknown->error notification.

isBlockedIP now also rejects 100.64.0.0/10 (RFC 6598 carrier-grade
NAT), which net.IP.IsPrivate() does not cover, closing an SSRF gap in
the webhook destination guard (both the pre-request check and the
per-dial check use isBlockedIP).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BwxdSt4reTm7Dj1oxRvpP3

2026-07-04 14:58:09 +07:00

cmd/server

feat(server): запуск планировщика, /metrics, graceful shutdown

2026-07-04 14:14:00 +07:00

docs/superpowers

docs: план реализации Фазы 3 (расписание, уведомления, метрики)

2026-07-04 13:02:44 +07:00

internal

fix(phase3): skip templateless domains in scheduler; block CGNAT range in webhook SSRF guard

2026-07-04 14:58:09 +07:00

web

feat(web): расписание, каналы уведомлений, история проверок, drift-badge